# Flog Txt Version 1 # Analyzer Version: 2024.2.1 # Analyzer Build Date: Mar 23 2024 12:02:19 # Log Creation Date: 24.05.2024 23:09:58.425 Process: id = "1" image_name = "7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe" page_root = "0x51efd000" os_pid = "0x11d0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x678" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ebd3" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 119 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 120 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 121 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 122 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 123 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 124 start_va = 0x1a0000 end_va = 0x1a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 125 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 126 start_va = 0xc40000 end_va = 0xc41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 127 start_va = 0x1380000 end_va = 0x13a9fff monitored = 1 entry_point = 0x139946f region_type = mapped_file name = "7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\7bb3816e58d8a956b13aac53f75f762442a9849cd0ab324be6334e9a5e4b718f.exe") Region: id = 128 start_va = 0x77220000 end_va = 0x7739afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 129 start_va = 0x7f1d0000 end_va = 0x7f1f2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f1d0000" filename = "" Region: id = 130 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 131 start_va = 0x7fff0000 end_va = 0x7ffff079ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 132 start_va = 0x7ffff07a0000 end_va = 0x7ffff0960fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 133 start_va = 0x7ffff0961000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffff0961000" filename = "" Region: id = 272 start_va = 0x400000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 273 start_va = 0x656f0000 end_va = 0x6573ffff monitored = 0 entry_point = 0x65708180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 274 start_va = 0x65670000 end_va = 0x656e9fff monitored = 0 entry_point = 0x65683290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 275 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 276 start_va = 0x65740000 end_va = 0x65747fff monitored = 0 entry_point = 0x657417c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 277 start_va = 0xc50000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 278 start_va = 0x770a0000 end_va = 0x7717ffff monitored = 0 entry_point = 0x770b3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 279 start_va = 0x74920000 end_va = 0x74a9dfff monitored = 0 entry_point = 0x749d1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 280 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 281 start_va = 0x7f0d0000 end_va = 0x7f1cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f0d0000" filename = "" Region: id = 282 start_va = 0x4c0000 end_va = 0x57dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 283 start_va = 0x73ea0000 end_va = 0x73f31fff monitored = 0 entry_point = 0x73ee0380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 284 start_va = 0x7ed20000 end_va = 0x7f0c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 285 start_va = 0xc40000 end_va = 0xc43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 286 start_va = 0x74250000 end_va = 0x7439efff monitored = 0 entry_point = 0x74306820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 287 start_va = 0x74c10000 end_va = 0x74d56fff monitored = 0 entry_point = 0x74c21cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 288 start_va = 0x1b0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 289 start_va = 0x580000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 290 start_va = 0x680000 end_va = 0x807fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 291 start_va = 0xc50000 end_va = 0xc79fff monitored = 0 entry_point = 0xc55680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 292 start_va = 0xe10000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e10000" filename = "" Region: id = 293 start_va = 0x757e0000 end_va = 0x7580afff monitored = 0 entry_point = 0x757e5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 294 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 295 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 296 start_va = 0x810000 end_va = 0x990fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 297 start_va = 0x13b0000 end_va = 0x27affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013b0000" filename = "" Region: id = 298 start_va = 0xc50000 end_va = 0xc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 299 start_va = 0xc60000 end_va = 0xc63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c60000" filename = "" Region: id = 300 start_va = 0x75a50000 end_va = 0x75acafff monitored = 0 entry_point = 0x75a6e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 301 start_va = 0x75640000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75675630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 302 start_va = 0x75900000 end_va = 0x75943fff monitored = 0 entry_point = 0x75919d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 303 start_va = 0x75ad0000 end_va = 0x75b7cfff monitored = 0 entry_point = 0x75ae4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 304 start_va = 0x73f50000 end_va = 0x73f6dfff monitored = 0 entry_point = 0x73f5b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 305 start_va = 0x73f40000 end_va = 0x73f49fff monitored = 0 entry_point = 0x73f42a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 306 start_va = 0x755e0000 end_va = 0x75637fff monitored = 0 entry_point = 0x756225c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 307 start_va = 0x27b0000 end_va = 0x298ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 308 start_va = 0x6f8e0000 end_va = 0x6f8f8fff monitored = 0 entry_point = 0x6f8e47e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 309 start_va = 0x74f00000 end_va = 0x74f0efff monitored = 0 entry_point = 0x74f02e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 310 start_va = 0x75ca0000 end_va = 0x7709efff monitored = 0 entry_point = 0x75e5b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 311 start_va = 0x758c0000 end_va = 0x758f6fff monitored = 0 entry_point = 0x758c3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 312 start_va = 0x74f10000 end_va = 0x75408fff monitored = 0 entry_point = 0x75117610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 313 start_va = 0x75420000 end_va = 0x755dcfff monitored = 0 entry_point = 0x75502a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 314 start_va = 0x74e30000 end_va = 0x74e74fff monitored = 0 entry_point = 0x74e4de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 315 start_va = 0x75410000 end_va = 0x7541bfff monitored = 0 entry_point = 0x75413930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 316 start_va = 0x77180000 end_va = 0x7720cfff monitored = 0 entry_point = 0x771c9b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 317 start_va = 0x74d60000 end_va = 0x74da3fff monitored = 0 entry_point = 0x74d67410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 318 start_va = 0x75950000 end_va = 0x75a3afff monitored = 0 entry_point = 0x7598d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 319 start_va = 0xc70000 end_va = 0xd00fff monitored = 0 entry_point = 0xca8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 320 start_va = 0x74820000 end_va = 0x748b1fff monitored = 0 entry_point = 0x74858cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 321 start_va = 0x6f8d0000 end_va = 0x6f8defff monitored = 0 entry_point = 0x6f8d2a50 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\SysWOW64\\wtsapi32.dll" (normalized: "c:\\windows\\syswow64\\wtsapi32.dll") Region: id = 322 start_va = 0x6f8a0000 end_va = 0x6f8cafff monitored = 0 entry_point = 0x6f8a51b0 region_type = mapped_file name = "rstrtmgr.dll" filename = "\\Windows\\SysWOW64\\RstrtMgr.dll" (normalized: "c:\\windows\\syswow64\\rstrtmgr.dll") Region: id = 323 start_va = 0x6f990000 end_va = 0x6f9affff monitored = 0 entry_point = 0x6f99d120 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 324 start_va = 0x71590000 end_va = 0x715aafff monitored = 0 entry_point = 0x71599050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 325 start_va = 0x6f960000 end_va = 0x6f98bfff monitored = 0 entry_point = 0x6f97bb10 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll") Region: id = 326 start_va = 0x74e10000 end_va = 0x74e22fff monitored = 0 entry_point = 0x74e11d20 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 327 start_va = 0x6f890000 end_va = 0x6f89ffff monitored = 0 entry_point = 0x6f8934d0 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 328 start_va = 0x6f870000 end_va = 0x6f88bfff monitored = 0 entry_point = 0x6f874720 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 329 start_va = 0x6f850000 end_va = 0x6f864fff monitored = 0 entry_point = 0x6f855210 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 330 start_va = 0x6f840000 end_va = 0x6f849fff monitored = 0 entry_point = 0x6f8428d0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 331 start_va = 0x6f810000 end_va = 0x6f83efff monitored = 0 entry_point = 0x6f825140 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\SysWOW64\\logoncli.dll" (normalized: "c:\\windows\\syswow64\\logoncli.dll") Region: id = 332 start_va = 0x6f7d0000 end_va = 0x6f80afff monitored = 0 entry_point = 0x6f7d7e00 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\SysWOW64\\activeds.dll" (normalized: "c:\\windows\\syswow64\\activeds.dll") Region: id = 333 start_va = 0x6f790000 end_va = 0x6f7c7fff monitored = 0 entry_point = 0x6f7ad280 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\SysWOW64\\adsldpc.dll" (normalized: "c:\\windows\\syswow64\\adsldpc.dll") Region: id = 334 start_va = 0x73f70000 end_va = 0x73fc2fff monitored = 0 entry_point = 0x73f90a10 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 335 start_va = 0xc70000 end_va = 0xc73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 336 start_va = 0x715c0000 end_va = 0x717ccfff monitored = 0 entry_point = 0x716aacb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 337 start_va = 0x6f780000 end_va = 0x6f787fff monitored = 0 entry_point = 0x6f781740 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll") Region: id = 338 start_va = 0x74db0000 end_va = 0x74e0efff monitored = 0 entry_point = 0x74db4af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 339 start_va = 0x6f760000 end_va = 0x6f775fff monitored = 0 entry_point = 0x6f7621d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 340 start_va = 0x6f6f0000 end_va = 0x6f756fff monitored = 0 entry_point = 0x6f705a00 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 341 start_va = 0x6f5e0000 end_va = 0x6f6e6fff monitored = 0 entry_point = 0x6f656450 region_type = mapped_file name = "gpedit.dll" filename = "\\Windows\\SysWOW64\\gpedit.dll" (normalized: "c:\\windows\\syswow64\\gpedit.dll") Region: id = 342 start_va = 0x400000 end_va = 0x401fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 343 start_va = 0x4b0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 344 start_va = 0x6f5c0000 end_va = 0x6f5defff monitored = 0 entry_point = 0x6f5c8a90 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll") Region: id = 345 start_va = 0x6f5b0000 end_va = 0x6f5bffff monitored = 0 entry_point = 0x6f5b9b10 region_type = mapped_file name = "dssec.dll" filename = "\\Windows\\SysWOW64\\dssec.dll" (normalized: "c:\\windows\\syswow64\\dssec.dll") Region: id = 346 start_va = 0x6f4c0000 end_va = 0x6f4fefff monitored = 0 entry_point = 0x6f4d46c0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\SysWOW64\\framedynos.dll" (normalized: "c:\\windows\\syswow64\\framedynos.dll") Region: id = 347 start_va = 0x72d80000 end_va = 0x72f8efff monitored = 0 entry_point = 0x72e2b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 348 start_va = 0x6f500000 end_va = 0x6f5a8fff monitored = 0 entry_point = 0x6f50dbf0 region_type = mapped_file name = "dsuiext.dll" filename = "\\Windows\\SysWOW64\\dsuiext.dll" (normalized: "c:\\windows\\syswow64\\dsuiext.dll") Region: id = 349 start_va = 0x6f4b0000 end_va = 0x6f4b7fff monitored = 0 entry_point = 0x6f4b1c60 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\SysWOW64\\dsrole.dll" (normalized: "c:\\windows\\syswow64\\dsrole.dll") Region: id = 350 start_va = 0x6f490000 end_va = 0x6f4abfff monitored = 0 entry_point = 0x6f497ee0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\SysWOW64\\ntdsapi.dll" (normalized: "c:\\windows\\syswow64\\ntdsapi.dll") Region: id = 351 start_va = 0x6f450000 end_va = 0x6f480fff monitored = 0 entry_point = 0x6f45c0c0 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\SysWOW64\\authz.dll" (normalized: "c:\\windows\\syswow64\\authz.dll") Region: id = 352 start_va = 0xc80000 end_va = 0xc80fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 353 start_va = 0x410000 end_va = 0x411fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 354 start_va = 0xc80000 end_va = 0xc8efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpedit.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\gpedit.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\gpedit.dll.mui") Region: id = 355 start_va = 0x9a0000 end_va = 0xa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 356 start_va = 0xc90000 end_va = 0xc90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c90000" filename = "" Region: id = 357 start_va = 0xca0000 end_va = 0xca0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 358 start_va = 0x73e20000 end_va = 0x73e94fff monitored = 0 entry_point = 0x73e59a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 359 start_va = 0x2990000 end_va = 0x2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 360 start_va = 0xca0000 end_va = 0xca0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 361 start_va = 0x420000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 362 start_va = 0xaa0000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 2821 start_va = 0x460000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 2822 start_va = 0xca0000 end_va = 0xd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 2823 start_va = 0xda0000 end_va = 0xdaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 2824 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 2825 start_va = 0xdc0000 end_va = 0xdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 2826 start_va = 0xdd0000 end_va = 0xdd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000dd0000" filename = "" Region: id = 2827 start_va = 0x75700000 end_va = 0x75783fff monitored = 0 entry_point = 0x75726220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 2828 start_va = 0xde0000 end_va = 0xde0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 2829 start_va = 0x6f440000 end_va = 0x6f44cfff monitored = 0 entry_point = 0x6f443520 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll") Region: id = 2830 start_va = 0x6f3d0000 end_va = 0x6f436fff monitored = 0 entry_point = 0x6f3eb610 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll") Region: id = 2831 start_va = 0x6f310000 end_va = 0x6f3cefff monitored = 0 entry_point = 0x6f341e80 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll") Region: id = 2832 start_va = 0xda0000 end_va = 0xdaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 2833 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 2834 start_va = 0xdc0000 end_va = 0xdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 2964 start_va = 0x420000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 2965 start_va = 0xaa0000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 2966 start_va = 0xba0000 end_va = 0xbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 2967 start_va = 0xbe0000 end_va = 0xc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 2968 start_va = 0x1210000 end_va = 0x130ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 2969 start_va = 0x1310000 end_va = 0x134ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001310000" filename = "" Region: id = 2970 start_va = 0x27b0000 end_va = 0x28affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 2971 start_va = 0x28b0000 end_va = 0x28effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028b0000" filename = "" Region: id = 2972 start_va = 0x2980000 end_va = 0x298ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002980000" filename = "" Region: id = 2973 start_va = 0x2990000 end_va = 0x2a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 2974 start_va = 0x2b80000 end_va = 0x2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 2975 start_va = 0x2b90000 end_va = 0x2c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 2976 start_va = 0x2c90000 end_va = 0x3070fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 2977 start_va = 0x6f2e0000 end_va = 0x6f307fff monitored = 0 entry_point = 0x6f2e7820 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 2978 start_va = 0x6f260000 end_va = 0x6f2d0fff monitored = 0 entry_point = 0x6f2b69e0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\SysWOW64\\efswrt.dll" (normalized: "c:\\windows\\syswow64\\efswrt.dll") Region: id = 2979 start_va = 0x6fe50000 end_va = 0x6ff17fff monitored = 0 entry_point = 0x6febae90 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\SysWOW64\\WinTypes.dll" (normalized: "c:\\windows\\syswow64\\wintypes.dll") Region: id = 2980 start_va = 0x6f210000 end_va = 0x6f258fff monitored = 0 entry_point = 0x6f216450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 2981 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2982 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2983 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2984 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2985 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2986 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2987 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2988 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2989 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2990 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2991 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2992 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2993 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2994 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2995 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2996 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2997 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2998 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2999 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3000 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3001 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3002 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3003 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3004 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3005 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3006 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3007 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3008 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3009 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3010 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3011 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3012 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3013 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3014 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3015 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3016 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3017 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3018 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3019 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3020 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3021 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3022 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3023 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3024 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3025 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3026 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3027 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3028 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3029 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3030 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3031 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3032 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3033 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3034 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3035 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3036 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3037 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3038 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3039 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3040 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3041 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3042 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3043 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3044 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3045 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3046 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3047 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3048 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3049 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3050 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3051 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3052 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3053 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3054 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3055 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3056 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3057 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3058 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3059 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3060 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3061 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3062 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3063 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3064 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3065 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3066 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3067 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3068 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3069 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3070 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3071 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3072 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3073 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3074 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3075 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3076 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3077 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3078 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3079 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3080 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3081 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3082 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3083 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3084 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3085 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3086 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3087 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3088 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3089 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3090 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3091 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3092 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3093 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3094 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3095 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3096 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3097 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3098 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3099 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3100 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3101 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3102 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3103 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3104 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3105 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3106 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3107 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3108 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3109 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3110 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3111 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3112 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3113 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3114 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3115 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3116 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3117 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3118 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3119 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3120 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3121 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3122 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3123 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3124 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3125 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3126 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3127 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3128 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3129 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3130 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3131 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3132 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3133 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3134 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3135 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3136 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3137 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3138 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3139 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3140 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3141 start_va = 0x2a90000 end_va = 0x2b40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3142 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3143 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3144 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3145 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3146 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3147 start_va = 0x2a90000 end_va = 0x2b34fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3148 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3149 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3150 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3151 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3152 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3153 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3154 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3155 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3156 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3157 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3158 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3159 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3160 start_va = 0x2a90000 end_va = 0x2b31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3161 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3162 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3163 start_va = 0x2a90000 end_va = 0x2b3bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3164 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3165 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3166 start_va = 0x2a90000 end_va = 0x2b35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3167 start_va = 0x2a90000 end_va = 0x2b36fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3168 start_va = 0x2a90000 end_va = 0x2b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3169 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3170 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3171 start_va = 0x2a90000 end_va = 0x2b37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3172 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3173 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3174 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3175 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3176 start_va = 0x2a90000 end_va = 0x2b3afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3177 start_va = 0x2a90000 end_va = 0x2b3dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3178 start_va = 0x2a90000 end_va = 0x2b38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3179 start_va = 0x2a90000 end_va = 0x2b3efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3180 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3181 start_va = 0x2a90000 end_va = 0x2b32fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3182 start_va = 0x2a90000 end_va = 0x2b39fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3183 start_va = 0x2a90000 end_va = 0x2b33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3276 start_va = 0x2a90000 end_va = 0x2b3cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3277 start_va = 0x2a90000 end_va = 0x2b5bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3278 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3279 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3280 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3281 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3282 start_va = 0x3080000 end_va = 0x33b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3283 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3284 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3285 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3286 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3287 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3300 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3301 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3311 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3312 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3313 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3314 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3315 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3316 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3317 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3318 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3319 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3320 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3330 start_va = 0x2a90000 end_va = 0x2b5cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3331 start_va = 0x2a90000 end_va = 0x2b5dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3338 start_va = 0x2a90000 end_va = 0x2b5afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3339 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3340 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3341 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3342 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3343 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3344 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3345 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3346 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3347 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3353 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3354 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3355 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3356 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3357 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3358 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3359 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3360 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3361 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3362 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3363 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3364 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3365 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3366 start_va = 0x2a90000 end_va = 0x2b53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3367 start_va = 0x2a90000 end_va = 0x2b5dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3368 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3369 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3370 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3371 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3372 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3373 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3374 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3375 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3376 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3380 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3381 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3418 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3419 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3420 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3421 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3422 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3423 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3424 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3425 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3426 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3427 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3429 start_va = 0x2a90000 end_va = 0x2b5dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3430 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3432 start_va = 0x28f0000 end_va = 0x292ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 3433 start_va = 0x2930000 end_va = 0x296ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 3434 start_va = 0x33c0000 end_va = 0x34bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033c0000" filename = "" Region: id = 3435 start_va = 0x34c0000 end_va = 0x35bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034c0000" filename = "" Region: id = 3436 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3437 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3438 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3439 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3440 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3441 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3442 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3443 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3444 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3445 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3470 start_va = 0x2a90000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3471 start_va = 0x2a90000 end_va = 0x2b5bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3502 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3503 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3504 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3505 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3506 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3507 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3508 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3509 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3510 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3511 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3516 start_va = 0x2a90000 end_va = 0x2b53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3527 start_va = 0x2a90000 end_va = 0x2b5bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3532 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3533 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3534 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3535 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3536 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3537 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3538 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3539 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3540 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3541 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3544 start_va = 0x2a90000 end_va = 0x2b5afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3545 start_va = 0x2a90000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3577 start_va = 0x2a90000 end_va = 0x2b5afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3578 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3579 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3580 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3581 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3582 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3583 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3584 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3585 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3586 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3588 start_va = 0x2a90000 end_va = 0x2b5efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3589 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3611 start_va = 0x2a90000 end_va = 0x2b60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3630 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3631 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3632 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3633 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3634 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3635 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3636 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3637 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3638 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3640 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3641 start_va = 0x2a90000 end_va = 0x2b58fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3659 start_va = 0x2a90000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3660 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3661 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3662 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3663 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3664 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3665 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3666 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3667 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3668 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3669 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3670 start_va = 0x2a90000 end_va = 0x2b60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3672 start_va = 0x2a90000 end_va = 0x2b5afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3673 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3674 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3675 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3676 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3677 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3678 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3679 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3680 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3681 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3682 start_va = 0x2a90000 end_va = 0x2b58fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3683 start_va = 0x2a90000 end_va = 0x2b53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3684 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3685 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3686 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3687 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3688 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3689 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3690 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3691 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3692 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3693 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3694 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3695 start_va = 0x2a90000 end_va = 0x2b5dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3711 start_va = 0x2a90000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3712 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3713 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3714 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3715 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3716 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3717 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3718 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3719 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3720 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3721 start_va = 0x2a90000 end_va = 0x2b57fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3748 start_va = 0x2a90000 end_va = 0x2b57fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3749 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3750 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3751 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3752 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3753 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3754 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3755 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3756 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3757 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3759 start_va = 0x2a90000 end_va = 0x2b5dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3773 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3775 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3776 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3777 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3778 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3779 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3780 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3781 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3782 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3783 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3802 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3823 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3824 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3825 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3826 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3827 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3828 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3829 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3830 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3831 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3832 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3837 start_va = 0x2a90000 end_va = 0x2b53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3850 start_va = 0x2a90000 end_va = 0x2b5efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3851 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3852 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3853 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3854 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3855 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3856 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3857 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3858 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3859 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3870 start_va = 0x2a90000 end_va = 0x2b60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3883 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3884 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3885 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3886 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3887 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3888 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3889 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3890 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3891 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3892 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3897 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3913 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3914 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3915 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3916 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3917 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3918 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3919 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3920 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3921 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3922 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3923 start_va = 0x2a90000 end_va = 0x2b5bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3924 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3925 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3926 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3927 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3928 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3929 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3930 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3931 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3932 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3933 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3935 start_va = 0x2a90000 end_va = 0x2b56fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3963 start_va = 0x2a90000 end_va = 0x2b51fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 3964 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3965 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3966 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3967 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3968 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3969 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3970 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3971 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 3972 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3973 start_va = 0x2a90000 end_va = 0x2b5afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4007 start_va = 0x2a90000 end_va = 0x2b55fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4008 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4009 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4010 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4011 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4012 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4013 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4014 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4015 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4016 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4019 start_va = 0x2a90000 end_va = 0x2b54fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4026 start_va = 0x2a90000 end_va = 0x2b5efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4027 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4028 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4029 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4030 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4031 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4032 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4033 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4034 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4035 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4036 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4047 start_va = 0x2a90000 end_va = 0x2b5cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4048 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4049 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4050 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4051 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4052 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4053 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4054 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4055 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4056 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4075 start_va = 0x2a90000 end_va = 0x2b59fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4112 start_va = 0x2a90000 end_va = 0x2b5efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4113 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4114 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4115 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4116 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4117 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4118 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4119 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4120 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4121 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4132 start_va = 0x2a90000 end_va = 0x2b52fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4148 start_va = 0x2a90000 end_va = 0x2acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 4149 start_va = 0x35c0000 end_va = 0x36bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035c0000" filename = "" Region: id = 4162 start_va = 0x36c0000 end_va = 0x3784fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4163 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4164 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4165 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4166 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4167 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4168 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4169 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4170 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4171 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4172 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4211 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4212 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4213 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4214 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4215 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4216 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4217 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4218 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4219 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4220 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4226 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4227 start_va = 0x36c0000 end_va = 0x3787fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4228 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4229 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4230 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4231 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4232 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4233 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4234 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4235 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4236 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4237 start_va = 0x36c0000 end_va = 0x3787fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4238 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4239 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4240 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4241 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4242 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4243 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4244 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4245 start_va = 0xda0000 end_va = 0xdacfff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4246 start_va = 0xdb0000 end_va = 0xdb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\svchost.exe.mui") Region: id = 4247 start_va = 0xda0000 end_va = 0xdaafff monitored = 0 entry_point = 0xda3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4294 start_va = 0x36c0000 end_va = 0x378afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4295 start_va = 0x2ad0000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4296 start_va = 0x2ad0000 end_va = 0x2b7cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4297 start_va = 0x2ad0000 end_va = 0x2b79fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4298 start_va = 0x2ad0000 end_va = 0x2b7cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4299 start_va = 0x2ad0000 end_va = 0x2b77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4300 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4301 start_va = 0x2ad0000 end_va = 0x2b76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4302 start_va = 0x2ad0000 end_va = 0x2b76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4303 start_va = 0x2ad0000 end_va = 0x2b7cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4304 start_va = 0x2ad0000 end_va = 0x2b75fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4305 start_va = 0x2ad0000 end_va = 0x2b7efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4306 start_va = 0x2ad0000 end_va = 0x2b71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4307 start_va = 0x2ad0000 end_va = 0x2b74fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4308 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4309 start_va = 0x2ad0000 end_va = 0x2b79fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4310 start_va = 0x2ad0000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4311 start_va = 0x2ad0000 end_va = 0x2b77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4312 start_va = 0x2ad0000 end_va = 0x2b71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4313 start_va = 0x2ad0000 end_va = 0x2b72fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4314 start_va = 0x2ad0000 end_va = 0x2b7bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4315 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4316 start_va = 0x2ad0000 end_va = 0x2b71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4317 start_va = 0x36c0000 end_va = 0x3770fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4318 start_va = 0x2ad0000 end_va = 0x2b78fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4319 start_va = 0x2ad0000 end_va = 0x2b76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4320 start_va = 0x2ad0000 end_va = 0x2b76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4321 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4322 start_va = 0x2ad0000 end_va = 0x2b76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4323 start_va = 0x2ad0000 end_va = 0x2b7efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4324 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4325 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4326 start_va = 0x2ad0000 end_va = 0x2b78fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4327 start_va = 0x2ad0000 end_va = 0x2b78fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4328 start_va = 0x2ad0000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4329 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4330 start_va = 0x2ad0000 end_va = 0x2b71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4331 start_va = 0x2ad0000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4332 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4333 start_va = 0x2ad0000 end_va = 0x2b7efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4334 start_va = 0x2ad0000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4335 start_va = 0x2ad0000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4336 start_va = 0x2ad0000 end_va = 0x2b75fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4337 start_va = 0x2ad0000 end_va = 0x2b74fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4338 start_va = 0x2ad0000 end_va = 0x2b72fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4339 start_va = 0x2ad0000 end_va = 0x2b74fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4340 start_va = 0x2ad0000 end_va = 0x2b78fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 4341 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4342 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4343 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4344 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4345 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4346 start_va = 0x36c0000 end_va = 0x378cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4349 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4350 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4351 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4352 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4353 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4354 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4355 start_va = 0x36c0000 end_va = 0x3784fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4356 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4357 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4358 start_va = 0x36c0000 end_va = 0x3782fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4359 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4360 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4361 start_va = 0x36c0000 end_va = 0x378dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4362 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4363 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4364 start_va = 0x36c0000 end_va = 0x378dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4365 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4366 start_va = 0x36c0000 end_va = 0x3790fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4367 start_va = 0x36c0000 end_va = 0x3788fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4368 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4369 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4370 start_va = 0x6f1f0000 end_va = 0x6f200fff monitored = 0 entry_point = 0x6f1f8fa0 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll") Region: id = 4371 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4372 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4373 start_va = 0x36c0000 end_va = 0x3784fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4374 start_va = 0x36c0000 end_va = 0x3782fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4375 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4376 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4454 start_va = 0x36c0000 end_va = 0x3787fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4455 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4456 start_va = 0x36c0000 end_va = 0x3785fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4458 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4459 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4460 start_va = 0x36c0000 end_va = 0x378cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4463 start_va = 0x36c0000 end_va = 0x3786fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4464 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4465 start_va = 0x36c0000 end_va = 0x378efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4466 start_va = 0x36c0000 end_va = 0x3789fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4467 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4468 start_va = 0x36c0000 end_va = 0x3783fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4473 start_va = 0x36c0000 end_va = 0x378efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4474 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4475 start_va = 0x36c0000 end_va = 0x3782fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4477 start_va = 0x36c0000 end_va = 0x3786fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4478 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4479 start_va = 0x36c0000 end_va = 0x378dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4480 start_va = 0x36c0000 end_va = 0x3781fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4481 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4482 start_va = 0x36c0000 end_va = 0x378cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4486 start_va = 0x36c0000 end_va = 0x3783fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4487 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4488 start_va = 0x36c0000 end_va = 0x378ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4489 start_va = 0x36c0000 end_va = 0x378cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4490 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4491 start_va = 0x36c0000 end_va = 0x378ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4492 start_va = 0x36c0000 end_va = 0x3786fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4493 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4494 start_va = 0x36c0000 end_va = 0x378bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4516 start_va = 0x36c0000 end_va = 0x3789fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4517 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4518 start_va = 0x36c0000 end_va = 0x378cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4539 start_va = 0x36c0000 end_va = 0x3788fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4540 start_va = 0xda0000 end_va = 0xda3fff monitored = 0 entry_point = 0xda1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4541 start_va = 0x36c0000 end_va = 0x3787fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 4544 start_va = 0xca0000 end_va = 0xd66fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4545 start_va = 0xca0000 end_va = 0xca3fff monitored = 0 entry_point = 0xca1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4546 start_va = 0xca0000 end_va = 0xd6cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4547 start_va = 0xca0000 end_va = 0xd68fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4548 start_va = 0xca0000 end_va = 0xca3fff monitored = 0 entry_point = 0xca1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4549 start_va = 0xca0000 end_va = 0xd6afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4550 start_va = 0xca0000 end_va = 0xd6afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4551 start_va = 0xca0000 end_va = 0xca3fff monitored = 0 entry_point = 0xca1cd0 region_type = mapped_file name = "msfeedssync.exe" filename = "\\Windows\\System32\\msfeedssync.exe" (normalized: "c:\\windows\\system32\\msfeedssync.exe") Region: id = 4552 start_va = 0xca0000 end_va = 0xd70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4556 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4557 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4558 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4559 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4560 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4561 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4562 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4563 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4564 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4565 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4568 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4569 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4570 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4571 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4572 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4573 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4574 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4575 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4576 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4577 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4578 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4579 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4580 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4581 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4582 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4583 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4584 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4585 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4586 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4587 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4588 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4589 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4590 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4591 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4592 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4593 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4594 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4595 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4596 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4597 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4598 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4599 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4600 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4601 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4602 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4603 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4604 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4605 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4606 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4607 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4608 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4609 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4610 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4611 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4612 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4613 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4614 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4615 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4616 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4617 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4618 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4619 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4620 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4621 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4622 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4623 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4624 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4625 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4626 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4627 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4628 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4629 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4630 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4631 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4632 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4633 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4634 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4635 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4636 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4637 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4638 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4639 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4640 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4641 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4642 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4643 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4644 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4645 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4646 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4647 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4648 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4649 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4650 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4651 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4652 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4653 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4654 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4655 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4656 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4657 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4658 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4659 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4660 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4661 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4662 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4663 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4664 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4665 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4666 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4667 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4668 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4669 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4670 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4671 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4672 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4673 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4674 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4675 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4676 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4677 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4678 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4679 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4680 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4681 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4682 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4683 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4684 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4685 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4686 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4687 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4688 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4689 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4690 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4691 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4692 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4693 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4694 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4695 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4696 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4697 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4698 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4699 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4700 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4701 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4702 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4703 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4704 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4705 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4706 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4707 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4708 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4709 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4710 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4711 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4712 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4713 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4714 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4715 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4716 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4717 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4721 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4722 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4723 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4724 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4725 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4726 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4727 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4728 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4729 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4730 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4731 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4732 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4733 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4734 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4735 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4736 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4737 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4738 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4739 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4740 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4741 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4742 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4743 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4744 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4745 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4746 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4747 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4748 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4749 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4750 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4751 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4752 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4753 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4754 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4755 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4756 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4757 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4758 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4759 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4760 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4761 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4762 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4763 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4764 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4765 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4766 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4767 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4768 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4769 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4770 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4771 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4772 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4773 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4774 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4775 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4776 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4777 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4778 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4779 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4780 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4781 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4782 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4783 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4784 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4785 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4786 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4787 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4788 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4789 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4790 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4791 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4792 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4793 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4794 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4795 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4796 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4797 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4798 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4799 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4800 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4801 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4802 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4803 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4804 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4805 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4806 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4807 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4808 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4809 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4810 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4811 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4812 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4813 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4814 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4815 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4816 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4817 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4818 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4819 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4820 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4821 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4822 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4823 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4824 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4825 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4826 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4827 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4828 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4829 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4830 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4831 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4832 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4833 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4834 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4835 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4836 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4837 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4838 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4839 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4909 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4910 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4911 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4912 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4913 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4914 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4915 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4916 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4917 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4918 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4919 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4920 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4921 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4922 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4923 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4924 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4925 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4926 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4927 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4928 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4929 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4930 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4931 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4932 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4933 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4934 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4935 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4936 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4937 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4938 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4939 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4940 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4941 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4942 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4943 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4944 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4945 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4946 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4947 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4948 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4949 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4950 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4951 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4952 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4953 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4954 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4955 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4956 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4957 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4958 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4959 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4960 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4961 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4962 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4963 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4964 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4965 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4966 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4967 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4968 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4969 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4970 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4971 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4972 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4973 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4974 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4975 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4976 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4977 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4978 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4979 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4980 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4981 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4982 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4983 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4984 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4985 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4986 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4987 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4988 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4989 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4990 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4991 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4992 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4993 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4994 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4995 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4996 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4997 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4998 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4999 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5000 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5001 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5002 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5003 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5004 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5005 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5006 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5007 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5008 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5009 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5010 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5011 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5012 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5013 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5014 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5015 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5016 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5017 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5018 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5019 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5020 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5021 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5022 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5023 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5024 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5025 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5026 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5027 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5028 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5029 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5030 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5031 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5032 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5033 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5034 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5035 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5036 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5037 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5038 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5039 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5040 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5041 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5042 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5043 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5044 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5045 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5046 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5047 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5048 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5049 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5050 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5051 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5052 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5053 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5054 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5055 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5056 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5057 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5058 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5059 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5060 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5061 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5063 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5064 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5065 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5066 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5067 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5068 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5069 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5070 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5071 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5072 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5073 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5074 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5075 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5076 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5077 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5078 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5079 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5080 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5081 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5082 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5083 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5084 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5085 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5086 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5087 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5088 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5089 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5091 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5092 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5093 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5094 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5095 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5096 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5097 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5098 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5099 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5100 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5101 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5102 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5103 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5104 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5105 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5106 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5107 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5108 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5109 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5110 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5111 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5112 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5113 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5114 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5115 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5116 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5117 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5118 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5119 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5120 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5121 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5122 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5123 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5124 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5125 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5126 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5127 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5128 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5129 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5130 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5131 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5132 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5133 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5134 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5135 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5136 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5137 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5138 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5139 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5140 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5141 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5142 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5143 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5144 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5145 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5146 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5147 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5148 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5149 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5150 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5151 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5152 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5153 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5154 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5155 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5156 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5157 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5158 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5159 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5160 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5161 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5162 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5163 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5164 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5165 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5166 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5167 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5168 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5169 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5170 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5171 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5172 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5173 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5174 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5175 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5176 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5177 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5178 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5179 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5180 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5181 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5182 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5183 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5184 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5185 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5186 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5187 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5188 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5189 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5190 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5191 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5192 start_va = 0xca0000 end_va = 0xd68fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5193 start_va = 0xca0000 end_va = 0xd6dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5194 start_va = 0xca0000 end_va = 0xd68fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5195 start_va = 0xca0000 end_va = 0xd6bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5196 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5197 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5198 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5199 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5200 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5201 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5202 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5203 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5204 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5205 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5206 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5207 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5208 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5209 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5210 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5211 start_va = 0xca0000 end_va = 0xd69fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5212 start_va = 0xca0000 end_va = 0xd67fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5213 start_va = 0xca0000 end_va = 0xd63fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5214 start_va = 0xca0000 end_va = 0xd66fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5215 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5216 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5217 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5218 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5219 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5220 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5221 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5222 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5223 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5224 start_va = 0xca0000 end_va = 0xd4dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5225 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5226 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5227 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5228 start_va = 0xca0000 end_va = 0xd4bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5229 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5230 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5231 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5232 start_va = 0xca0000 end_va = 0xd42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5233 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5234 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5235 start_va = 0xca0000 end_va = 0xd4efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5236 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5237 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5238 start_va = 0xca0000 end_va = 0xd43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5239 start_va = 0xca0000 end_va = 0xd4afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5240 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5241 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5242 start_va = 0xca0000 end_va = 0xd46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5243 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5244 start_va = 0xca0000 end_va = 0xd41fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5245 start_va = 0xca0000 end_va = 0xd47fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5250 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5251 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5252 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5253 start_va = 0xca0000 end_va = 0xd45fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5254 start_va = 0xca0000 end_va = 0xd49fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5255 start_va = 0xca0000 end_va = 0xd44fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5256 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5257 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5258 start_va = 0xca0000 end_va = 0xd4cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5259 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5260 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5261 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5262 start_va = 0xca0000 end_va = 0xd48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5263 start_va = 0xca0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5264 start_va = 0xca0000 end_va = 0xd50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5265 start_va = 0xca0000 end_va = 0xd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 5266 start_va = 0x2ad0000 end_va = 0x2b77fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 5267 start_va = 0x2ad0000 end_va = 0x2b7dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 5268 start_va = 0x2ad0000 end_va = 0x2b7afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 5269 start_va = 0x1b0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 5270 start_va = 0x580000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 5272 start_va = 0x2b90000 end_va = 0x2f65fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 5277 start_va = 0x2b90000 end_va = 0x2f64fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 5278 start_va = 0xda0000 end_va = 0xda0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000da0000" filename = "" Region: id = 5279 start_va = 0x6f410000 end_va = 0x6f44afff monitored = 0 entry_point = 0x6f41ada0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\SysWOW64\\adsldp.dll" (normalized: "c:\\windows\\syswow64\\adsldp.dll") Region: id = 5280 start_va = 0x6f380000 end_va = 0x6f400fff monitored = 0 entry_point = 0x6f39b260 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll") Region: id = 5281 start_va = 0x1b0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 5282 start_va = 0x580000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 5283 start_va = 0xdb0000 end_va = 0xdcbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.tlb" filename = "\\Windows\\SysWOW64\\activeds.tlb" (normalized: "c:\\windows\\syswow64\\activeds.tlb") Region: id = 5284 start_va = 0x6fe40000 end_va = 0x6fe49fff monitored = 0 entry_point = 0x6fe43200 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 5285 start_va = 0x70aa0000 end_va = 0x70b23fff monitored = 0 entry_point = 0x70ac6530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 5286 start_va = 0x747b0000 end_va = 0x747b6fff monitored = 0 entry_point = 0x747b1e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 5287 start_va = 0x71540000 end_va = 0x7156efff monitored = 0 entry_point = 0x7154bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 5402 start_va = 0xdd0000 end_va = 0xdd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\activeds.dll.mui") Region: id = 5403 start_va = 0x2f70000 end_va = 0x304ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 5433 start_va = 0x460000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 5434 start_va = 0x27b0000 end_va = 0x282ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027b0000" filename = "" Region: id = 5529 start_va = 0x420000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 5530 start_va = 0xaa0000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 5654 start_va = 0x460000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 5655 start_va = 0x1210000 end_va = 0x130ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 5926 start_va = 0xba0000 end_va = 0xbc4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ba0000" filename = "" Region: id = 5927 start_va = 0xda0000 end_va = 0xdaffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 5928 start_va = 0x2b90000 end_va = 0x2d8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b90000" filename = "" Region: id = 5929 start_va = 0x36c0000 end_va = 0x3abffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036c0000" filename = "" Region: id = 5930 start_va = 0x3ac0000 end_va = 0x40befff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ac0000" filename = "" Region: id = 5931 start_va = 0x6f190000 end_va = 0x6f20efff monitored = 0 entry_point = 0x6f19ef20 region_type = mapped_file name = "mscms.dll" filename = "\\Windows\\SysWOW64\\mscms.dll" (normalized: "c:\\windows\\syswow64\\mscms.dll") Region: id = 5932 start_va = 0x40c0000 end_va = 0x50fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 5933 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 5934 start_va = 0x5100000 end_va = 0x55f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005100000" filename = "" Region: id = 6368 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6371 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6373 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6374 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6375 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6376 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6377 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6379 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6380 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6381 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6382 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6399 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6430 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6449 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6452 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6455 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6464 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6468 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6489 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6492 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6500 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6507 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6512 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6515 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6518 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6524 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6527 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6531 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6536 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6539 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6542 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6543 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6554 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6574 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6593 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6597 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6598 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6602 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6604 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6605 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6606 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6607 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6609 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6628 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6668 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6669 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6715 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6719 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6733 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6762 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6789 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6790 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6792 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6796 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6797 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6800 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6802 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6804 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6807 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6810 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6933 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6935 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6938 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6942 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6943 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6948 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6951 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6953 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6954 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6961 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6968 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6970 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6972 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6974 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6975 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6979 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6980 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6982 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6983 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6984 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6985 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6986 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6989 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6991 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6992 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6993 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6994 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6996 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6997 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6998 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 6999 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7000 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7002 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7003 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7004 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7005 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7006 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7008 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7009 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7010 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7011 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7013 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7015 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7016 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7017 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7018 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7019 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7021 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7022 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7023 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7024 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7025 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7027 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7028 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7029 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7030 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7031 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7033 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7034 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7035 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7041 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7063 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7065 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7066 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7067 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7068 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7071 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7073 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7074 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7076 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7078 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7079 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7081 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7082 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7083 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7085 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7087 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7089 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7090 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7091 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7092 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7093 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7095 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7096 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7097 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7098 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7099 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7101 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7102 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7103 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7104 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7105 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7107 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7108 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7109 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7110 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7111 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7113 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7114 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7115 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7116 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7118 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7120 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7121 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7122 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7123 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7124 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7126 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7127 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7128 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7129 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7130 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7143 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7144 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7145 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7146 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7147 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7149 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7150 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7152 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7155 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7156 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7169 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7170 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7171 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7172 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7173 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7174 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7175 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7176 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7177 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7178 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7180 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7181 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7182 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7183 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7184 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7186 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7187 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7188 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7189 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7190 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7192 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7193 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7194 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7195 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7197 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7199 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7201 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7202 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7203 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7204 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7206 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7207 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7208 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7209 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7210 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7212 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7213 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7214 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7215 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7216 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7218 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7219 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7220 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7221 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7222 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7224 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7225 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7226 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7227 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7228 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7230 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7231 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7232 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7233 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7234 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7236 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7237 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7238 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7239 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7240 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7242 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7243 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7244 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7245 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7246 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7248 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7249 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7250 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7251 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7256 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7258 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7259 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7260 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7261 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7262 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7264 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7265 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7266 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7267 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7268 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7270 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7271 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7272 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7273 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7274 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7276 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7278 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7279 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7280 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7281 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7283 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7284 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7285 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7286 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7287 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7289 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7290 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7291 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7292 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7293 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7295 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7301 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7302 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7303 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7304 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7306 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7307 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7308 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7309 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7311 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7313 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7314 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7315 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7316 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7317 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7319 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7320 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7322 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7323 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7324 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7326 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7327 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7328 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7329 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7330 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7332 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7333 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7334 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7335 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7336 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7338 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7339 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7340 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7341 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7342 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7344 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7345 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7346 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7347 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7348 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7350 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7351 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7352 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7354 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7356 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7358 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7359 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7360 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7361 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7362 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7364 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7365 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7366 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7367 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7368 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7370 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7371 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7372 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7373 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7374 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7376 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7377 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7378 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7379 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7380 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7382 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7383 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7384 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7385 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7386 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7388 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7389 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7390 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7391 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7392 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7394 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7395 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7396 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7397 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7399 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7401 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7402 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7403 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7404 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7405 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7411 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7412 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7414 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7415 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7416 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7418 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7419 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7420 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7421 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7422 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7424 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7425 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7426 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7427 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7428 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7430 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7431 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7432 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7433 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7434 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7436 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7437 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7438 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7439 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7440 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7442 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7443 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7444 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7445 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7446 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7449 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7451 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7452 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7453 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7454 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7456 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7457 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7458 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7459 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7460 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7462 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7463 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7464 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7466 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7467 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7469 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7470 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7471 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7472 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7475 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7477 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7478 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7479 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7480 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7481 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7483 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7484 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7485 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7486 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7487 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7489 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7491 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7492 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7493 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7494 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7497 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7498 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7499 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7500 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7501 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7503 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7504 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7505 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7506 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7507 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7509 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7510 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7511 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7512 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7513 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7515 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7516 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7517 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7518 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7519 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7521 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7522 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7523 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7524 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7525 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7527 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7528 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7529 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7530 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7531 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7533 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7534 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7535 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7536 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7537 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7539 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7546 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7547 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7548 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7550 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7552 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7553 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7554 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7555 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7556 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7558 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7559 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7560 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7561 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7562 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7564 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7565 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7566 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7567 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7568 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7570 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7571 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7572 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7573 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7574 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7575 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7576 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7577 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7578 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7579 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7581 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7582 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7583 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7584 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7585 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7587 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7589 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7590 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7591 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7592 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7594 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7595 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7596 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7597 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7598 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7599 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7600 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7601 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7602 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7603 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7605 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7606 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7607 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7608 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7609 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7611 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7612 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7613 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7614 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7615 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7617 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7618 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7619 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7620 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7621 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7623 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7624 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7625 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7626 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7627 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7630 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7631 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7632 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7633 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7634 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7636 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7637 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7638 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7639 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7640 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7642 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7643 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7644 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7646 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7648 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7650 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7651 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7652 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7653 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7654 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7656 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7657 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7658 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7659 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7660 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7662 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7663 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7664 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7665 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7666 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7668 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7669 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7670 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7671 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7672 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7674 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7675 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7676 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7677 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7678 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7680 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7681 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7682 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7683 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7684 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7686 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7687 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7688 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7689 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7690 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7692 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7693 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7694 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7695 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7696 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7698 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7699 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7702 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7703 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7704 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7707 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7709 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7710 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7711 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7712 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7714 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7715 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7716 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7717 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7718 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7720 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7721 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7722 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7723 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7724 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7726 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7727 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7728 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7729 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7730 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7732 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7733 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7734 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7736 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7747 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7749 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7758 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7759 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7764 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7765 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7771 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7776 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7777 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7778 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7779 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7781 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7782 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7783 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7784 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7785 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7787 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7788 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7789 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7790 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7791 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7793 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7794 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7795 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7796 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7797 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7799 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7800 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7801 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7802 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7803 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7805 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7806 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7807 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7808 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7809 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7811 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7812 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7813 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7814 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7815 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7817 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7819 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7820 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7821 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7822 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7827 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7828 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7829 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7830 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7831 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7833 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7834 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7835 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7836 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7837 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7839 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7840 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7841 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7842 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7843 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7845 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7846 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7847 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7848 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7849 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7851 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7852 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7853 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7854 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7855 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7857 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7858 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7859 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7860 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7861 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7863 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7864 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7866 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7867 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7869 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7870 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7871 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7872 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7873 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7874 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7876 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7877 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7878 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7879 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7880 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7882 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7883 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7884 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7885 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7886 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7888 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7889 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7890 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7891 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7892 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7894 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7895 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7896 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7897 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7898 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7900 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7901 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7902 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7903 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7904 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7906 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7907 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7908 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7909 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7910 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7912 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7913 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7914 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7915 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7916 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7918 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7919 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7920 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7921 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7922 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7923 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7924 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7925 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7927 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7928 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7930 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7931 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7932 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7933 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7934 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7936 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7937 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7938 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7939 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7940 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7942 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7943 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7944 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7945 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7946 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7947 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7948 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7949 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7950 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7954 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7956 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7957 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7958 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7959 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7960 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7962 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7963 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7964 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7965 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7966 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7968 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7969 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7970 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7971 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7972 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7974 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7975 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7976 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7977 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7978 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7980 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7981 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7982 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7983 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7984 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7988 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7990 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7991 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7993 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7994 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7996 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7997 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7998 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 7999 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8000 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8002 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8003 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8004 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8005 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8006 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8008 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8009 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8010 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8011 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8012 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8013 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8014 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8015 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8016 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8017 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8019 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8020 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8021 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8022 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8023 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8025 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8026 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8027 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8028 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8029 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8031 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8032 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8033 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8034 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8035 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8037 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8038 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8039 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8040 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8041 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8043 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8044 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8045 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8046 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8047 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8049 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8050 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8051 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8052 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8053 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8054 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8055 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8056 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8057 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8058 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8060 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8061 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8062 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8063 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8064 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8065 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8066 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8067 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8069 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8070 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8072 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8073 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8074 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8075 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8076 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8078 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8079 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8080 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8081 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8082 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8084 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8085 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8086 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8087 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8089 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8091 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8092 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8093 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8094 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8095 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8097 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8100 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8103 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8109 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8110 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8111 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8112 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8119 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8120 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8123 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8125 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8128 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8129 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8131 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8132 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8135 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8136 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8138 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8139 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8140 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8142 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8143 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8144 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8151 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8152 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8154 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8155 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8156 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8157 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8158 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8160 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8161 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8162 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8164 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8168 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8169 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8170 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8171 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8172 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8189 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8191 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8208 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8209 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8212 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8213 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8215 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8229 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8230 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8243 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8251 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8253 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8254 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8255 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8291 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8292 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8294 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8295 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8296 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8297 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8298 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8300 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8301 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8302 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8303 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8304 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8306 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8307 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8310 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8311 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8312 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8314 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8315 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8316 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8318 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8319 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8321 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8322 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8323 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8324 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8326 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8327 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8328 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8329 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8330 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8331 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8333 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8334 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8335 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8336 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8337 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8339 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8340 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8341 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8342 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8343 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8345 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8346 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8347 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8348 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8349 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8350 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8351 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8352 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8354 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8355 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8357 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8358 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8359 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8360 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8361 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8362 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8363 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8364 start_va = 0xdb0000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "spla9fa.tmp" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\SPLA9FA.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\spla9fa.tmp") Region: id = 8416 start_va = 0x7ed20000 end_va = 0x7f0c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Thread: id = 1 os_tid = 0x11e0 [0102.471] RtlCreateHeap (Flags=0x41002, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0xc50000 [0102.485] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe74 | out: BaseAddress=0x18fe74*=0x77220000) returned 0x0 [0102.485] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="RtlAllocateHeap", Ordinal=0x0, ProcedureAddress=0x18fe74 | out: ProcedureAddress=0x18fe74*=0x77252bd0) returned 0x0 [0102.486] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe16c60 [0102.486] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb59ccf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb59ccf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb59ccf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x39d400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0102.486] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315ccf05, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315ccf05, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315ccf05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AccountsControlInternal.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x58200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AccountsRt.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0cef24, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0cef24, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0cef24, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282b9ff6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282b9ff6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282b9ff6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3163f611, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3163f611, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3163f611, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x524400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29be8d06, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29be8d06, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29be8d06, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x85800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e36f4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e36f4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e36f4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ActivationClient.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e714f9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29e714f9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29e97753, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1a0c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ActiveSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x217800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AddressParser.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5d2e303c, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5d309326, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x6ec00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b7b613, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5a274c2f, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5a274c2f, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adrclient.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba9b10f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x36e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b91d98a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b91d98a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac4cf7e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac4cf7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac4cf7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b943be8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b943be8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1cbb1e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1cbb1e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1cbb1e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc9600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x79ee8, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="advapi32res.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0a8cce, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0a8cce, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0a8cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2843776b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2843776b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2843776b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="amsi.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb0d81e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb0d81e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb0d81e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0102.487] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="APHostClient.dll", cAlternateFileName="")) returned 1 [0102.488] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff269e0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff269e0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff269e0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppCapture.dll", cAlternateFileName="")) returned 1 [0102.488] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fb0c58, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28fb0c58, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28fb0c58, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppContracts.dll", cAlternateFileName="")) returned 1 [0102.488] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e0d281, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e0d281, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e0d281, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0102.488] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecbe41, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ecbe41, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ecbe41, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0102.514] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfa48, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0102.514] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x6457b480, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x645a16ea, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0102.514] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3d400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppLockerCSP.dll", cAlternateFileName="")) returned 1 [0102.514] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5e0beba2, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5e0e5005, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x28600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5a86ab20, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5a890de3, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x5ae00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppointmentActivation.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c5b419, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c5b419, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c5b419, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x87000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppointmentApis.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="apprepapi.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="apprepsync.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283eb2be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283eb2be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x283eb2be, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2dd60, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppxAllUserStore.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7b400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppxApplicabilityEngine.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppXDeploymentClient.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314e80ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314e80ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314e80ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd9600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppxPackaging.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AppxSip.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ff45f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56ff45f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56ff45f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd87800, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x8dd87800, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x8dd87800, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab41f0c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc3df, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bbcc3df, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bbcc3df, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf2ee00, ftCreationTime.dwHighDateTime=0x1cc27d2, ftLastAccessTime.dwLowDateTime=0x2c7e0ff0, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xbaf2ee00, ftLastWriteTime.dwHighDateTime=0x1cc27d2, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99a07600, ftCreationTime.dwHighDateTime=0x1ce6542, ftLastAccessTime.dwLowDateTime=0x38f13f95, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x99a07600, ftLastWriteTime.dwHighDateTime=0x1ce6542, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfc3ede, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cfc3ede, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cfc3ede, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atlthunk.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c4dfe8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c4dfe8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c4dfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3ac00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6eda0, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x59690, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62e38, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x68162fec, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x68189271, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x6813cd95, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6813cd95, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x68162fec, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x68162fec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba74eb4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba74eb4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba74eb4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1be00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthBroker.dll", cAlternateFileName="")) returned 1 [0102.515] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2acbf689, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2acbf689, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2acbf689, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthBrokerUI.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31665867, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x31665867, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x31665867, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthExt.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314032d3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314032d3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314032d3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30863b8c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30889de6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30863b8c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52015a87, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x52015a87, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x52015a87, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x20e200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b943be8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b943be8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2be00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3235c4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3235c4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3235c4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d11b3d9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d11b3d9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d11b3d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d16788e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d16788e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d16788e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6f00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbfc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283eb2be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283eb2be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28411511, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba027a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8e076, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe8e076, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe8e076, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa2400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="AzureSettingSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28483c5f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28483c5f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x284a9e8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BackgroundMediaPolicy.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99009d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b99009d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b99009d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x29360, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31665867, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x31665867, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x31665867, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f6800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff269e0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff269e0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff269e0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bcastdvr.proxy.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1f1d64, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1f1d64, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1f1d64, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bcd.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50348, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BCP47Langs.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba4ec65, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba4ec65, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1a390, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db893a8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1db893a8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1db893a8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x58020, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314e80ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314e80ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314e80ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4ecc5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e4ecc5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e4ecc5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BingMaps.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e512eb1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e512eb1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e512eb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xace00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BingOnlineServices.dll", cAlternateFileName="")) returned 1 [0102.516] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba027a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283c5070, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283c5070, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x283c5070, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28352954, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28352954, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28352954, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BitsProxy.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5ab817, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e5ab817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e5ab817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="biwinrt.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c7423f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c7423f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c7423f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abda86e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2abda86e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2abda86e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BluetoothApis.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e69062e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e69062e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e69062e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5d60, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99009d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b99009d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b99009d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8e076, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe8e076, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe8e076, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BrowserSettingSync.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3235c4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3235c4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3235c4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315ccf05, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315ccf05, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315ccf05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3233627b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3233627b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3233627b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CallButtons.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CallButtons.ProxyStub.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290495be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x290495be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x290495be, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CallHistoryClient.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3e1be1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e3e1be1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e3e1be1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CameraCaptureUI.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2acbf689, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x60200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab41f0c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5131ee1d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5131ee1d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5131ee1d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bac1369, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bac1369, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bac1369, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcfe00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f387c01, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f387c01, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f387c01, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c6000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cdp.dll", cAlternateFileName="")) returned 1 [0102.517] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b765fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29b765fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29b765fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cemapi.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba4ec65, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba4ec65, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="certca.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac99437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b6e1650, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b6e1650, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b72db05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27bc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28378bb7, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28378bb7, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28378bb7, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e4a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac99437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c4dfe8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c4dfe8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c4dfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x38e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325725bd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x325725bd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x325725bd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28de7026, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28de7026, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28de7026, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35378, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5973a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e5973a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e5973a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8d60, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cfmifs.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5973a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e5973a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e5973a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cfmifsproxy.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x565e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Chakra.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8d000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Chakradiag.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Chakrathunk.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b765fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29b765fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29b765fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="chartv.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c81670, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c81670, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c81670, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x83e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ChatApis.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c074d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x333c074d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x333c074d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e0245, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282e0245, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282e0245, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d8c6ed, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29d8c6ed, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29d8c6ed, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x807e0, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feb42d5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2feb42d5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc3df, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bbcc3df, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bbcc3df, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0102.518] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29dd8b9a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29dd8b9a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29dd8b9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ClipboardServer.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2fcdca, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e2fcdca, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e34927f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Clipc.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f5fe91, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33f5fe91, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33f5fe91, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="clrhost.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51213daf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51213daf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51213daf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x77600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c351c3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c351c3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c351c3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmdext.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3077ed75, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3077ed75, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3077ed75, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x76600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cngcredui.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c351c3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c351c3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c351c3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd56cea1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xd56cea1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xd56cea1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2de80, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275e95db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x275e95db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x275e95db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1bd608, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="combase.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3168bac6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3168bac6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3168bac6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ef60, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315f315c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315f315c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315f315c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xeba00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57760, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="coml2.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb93d3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fbb93d3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fbb93d3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CommsTypeHelperUtil_ca.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0ff40a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f0ff40a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f0ff40a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2300, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0102.519] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ce0, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CompPkgSup.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314c1e90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314c1e90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314c1e90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab6816b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13d000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x39600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x144400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9f200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cc6e00, ftCreationTime.dwHighDateTime=0x1d5c5b7, ftLastAccessTime.dwLowDateTime=0x659c88b8, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x57cc6e00, ftLastWriteTime.dwHighDateTime=0x1d5c5b7, nFileSizeHigh=0x0, nFileSizeLow=0x3d120, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ConfigureExpandedStorage.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30889de6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30889de6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30889de6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x140200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51403c43, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51403c43, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51403c43, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ConnectedAccountState.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316193ba, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x316193ba, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3163f611, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="console.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ContactActivation.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c81670, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c81670, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c81670, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbbe00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ContactApis.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CoreMessaging.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff0078a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff0078a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff0078a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CoreMmRes.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3e1be1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e3e1be1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e3e1be1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b78, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CoreUIComponents.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="Cortana.Persona.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdf5714, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fdf5714, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fdf5714, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CortanaMapiHelper.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CortanaMapiHelper.ProxyStub.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5136b2ce, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5136b2ce, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5139153c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CredentialMigrationHandler.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3155a7fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3155a7fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3155a7fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CredProvDataModel.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3150e345, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3150e345, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3150e345, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="credprovhost.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3155a7fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3155a7fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3155a7fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="credprovs.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0102.520] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce92be3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ce92be3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ce92be3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x176c30, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1f1d64, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1f1d64, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1f1d64, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7b28, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d082a6f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d082a6f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d082a6f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0102.523] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba74eb4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba74eb4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba74eb4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x21600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e55f366, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e55f366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e55f366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptngc.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bac1369, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="CryptoWinRT.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba9b10f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10e70, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="crypttpmeksvc.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x59200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptuiwizard.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18540, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376f4af8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5b7ea368, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5b81051e, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bba6180, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bba6180, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bba6180, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x36800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="c_GSM7.DLL", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecbe41, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ecbe41, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ecbe41, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e4b2a2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29e4b2a2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29e4b2a2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e133198, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e133198, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x489c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3339a4f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3339a4f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3339a4f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x102e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3339a4f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3339a4f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3339a4f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7d330, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3267d62a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3267d62a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x326a388d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x217eb8, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3334e042, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3334e042, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3334e042, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33374298, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33374298, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33374298, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x215a68, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="D3D12.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332db932, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332db932, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x105c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332db932, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332db932, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7770, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0102.524] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a58a8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1a58a8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1a58a8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x386200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="D3DCompiler_47.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd9400, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x91600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c074d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x333c074d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x333c074d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e0d281, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e0d281, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e0d281, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dabapi.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f387c01, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f387c01, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f387c01, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DafCdp.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314c1e90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314c1e90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314c1e90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DafPrintProvider.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e585f21, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e585f21, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e585f21, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DaOtpCredentialProvider.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fef838, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fef838, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fef838, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2b0915, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e2b0915, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e2b0915, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DataExchange.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ea5bef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ea5bef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ea5bef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28de7026, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28de7026, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28de7026, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ca00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DavSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33432e59, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33432e59, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33432e59, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dbgcore.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334590af, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x334590af, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x334590af, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e3a00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33432e59, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33432e59, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33432e59, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x124200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334590af, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x334590af, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x334590af, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6b200, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="DbgModel.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cab2ecd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cab2ecd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cab2ecd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0102.525] FindNextFileW (in: hFindFile=0xe16c60, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc7cb00, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cc7cb00, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cc7cb00, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x1385bf2, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0102.544] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x77220000) returned 0x0 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc505a8 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc505c0 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc505d8 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc505f0 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50608 [0102.544] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50620 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50638 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50650 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50668 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50680 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50698 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc506b0 [0102.545] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc506c8 [0102.546] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc506e0 [0102.546] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc506f8 [0102.546] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50710 [0102.546] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc50728 [0102.546] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc504a0 [0102.547] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53830 [0102.547] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53740 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53728 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc537a0 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc536c8 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53848 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53860 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc536f8 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53770 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53710 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53800 [0102.548] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53698 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc536b0 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53758 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc536e0 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53818 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc537b8 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53788 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc537d0 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc537e8 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d80 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53ca8 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f00 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d20 [0102.549] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53ea0 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e70 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d98 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f90 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d50 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53cd8 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53eb8 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f48 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53cf0 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d38 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53db0 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f18 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e28 [0102.550] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53cc0 [0102.551] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53ee8 [0102.551] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53ed0 [0102.551] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f60 [0102.551] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0xc50000, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe16c60 [0102.552] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="kernel32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x770a0000) returned 0x0 [0102.553] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f30 [0102.553] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53f78 [0102.553] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d08 [0102.554] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53d68 [0102.554] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53de0 [0102.554] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53dc8 [0102.554] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e58 [0102.554] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53df8 [0102.555] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e10 [0102.555] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e40 [0102.555] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53e88 [0102.555] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54050 [0102.556] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53fd8 [0102.556] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54068 [0102.556] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53ff0 [0102.556] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53fc0 [0102.557] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54008 [0102.557] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54020 [0102.557] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54038 [0102.557] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc53fa8 [0102.557] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54380 [0102.558] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54368 [0102.558] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54338 [0102.558] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54308 [0102.558] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54320 [0102.559] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc542d8 [0102.559] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54278 [0102.559] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54248 [0102.559] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54200 [0102.559] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54170 [0102.560] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc540f8 [0102.560] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc542f0 [0102.560] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54398 [0102.560] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54128 [0102.560] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54290 [0102.561] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc540b0 [0102.561] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54140 [0102.561] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54350 [0102.561] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc540c8 [0102.562] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc540e0 [0102.562] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc542a8 [0102.562] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54158 [0102.562] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54110 [0102.562] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc542c0 [0102.563] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54188 [0102.563] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc541a0 [0102.563] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54230 [0102.563] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc541b8 [0102.563] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc541d0 [0102.564] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc541e8 [0102.564] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54218 [0102.564] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54260 [0102.564] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54470 [0102.564] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54440 [0102.565] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54458 [0102.565] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc543f8 [0102.565] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc543b0 [0102.565] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc543c8 [0102.565] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc543e0 [0102.565] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x0, dwReserved1=0xc50000, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe16c60 [0102.566] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="advapi32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x75a50000) returned 0x0 [0102.785] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.786] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD4Init", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x773048c0) returned 0x0 [0102.786] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54428 [0102.801] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.802] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD4Update", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x77304900) returned 0x0 [0102.802] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54410 [0102.803] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.803] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD4Final", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x77304820) returned 0x0 [0102.803] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc544b8 [0102.804] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.804] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD5Init", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x77290b60) returned 0x0 [0102.804] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54608 [0102.805] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.805] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD5Update", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x7728d6d0) returned 0x0 [0102.805] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54728 [0102.805] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x77220000) returned 0x0 [0102.806] LdrGetProcedureAddress (in: BaseAddress=0x77220000, Name="MD5Final", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x7728d630) returned 0x0 [0102.806] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54590 [0102.807] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc546c8 [0102.807] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc546f8 [0102.808] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54638 [0102.809] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc545a8 [0102.809] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54500 [0102.810] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc546e0 [0102.811] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc545c0 [0102.811] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54650 [0102.812] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54548 [0102.813] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc546b0 [0102.813] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54698 [0102.814] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54560 [0102.815] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54620 [0102.816] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54668 [0102.816] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54710 [0102.817] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54740 [0102.817] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc545d8 [0102.818] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54758 [0102.819] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc545f0 [0102.820] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc544d0 [0102.820] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54770 [0102.821] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc547a0 [0102.822] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54680 [0102.822] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc544e8 [0102.823] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54578 [0102.824] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54788 [0102.824] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="CRYPTBASE", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x73f40000) returned 0x0 [0102.825] LdrGetProcedureAddress (in: BaseAddress=0x73f40000, Name="SystemFunction040", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x73f42a90) returned 0x0 [0102.825] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54518 [0102.825] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="CRYPTBASE", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x73f40000) returned 0x0 [0102.826] LdrGetProcedureAddress (in: BaseAddress=0x73f40000, Name="SystemFunction041", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x73f42b00) returned 0x0 [0102.826] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54530 [0102.826] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54848 [0102.827] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54818 [0102.830] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc547b8 [0102.830] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54860 [0102.831] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54878 [0102.831] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe20068 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb59ccf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb59ccf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb59ccf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x39d400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315ccf05, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315ccf05, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315ccf05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AccountsControlInternal.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x58200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AccountsRt.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0cef24, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0cef24, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0cef24, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282b9ff6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282b9ff6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282b9ff6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3163f611, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3163f611, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3163f611, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x524400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29be8d06, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29be8d06, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29be8d06, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x85800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e36f4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e36f4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e36f4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActivationClient.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e714f9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29e714f9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29e97753, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1a0c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActiveSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x217800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AddressParser.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5d2e303c, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5d309326, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x6ec00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b7b613, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5a274c2f, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5a274c2f, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adrclient.dll", cAlternateFileName="")) returned 1 [0102.832] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba9b10f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x36e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b91d98a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b91d98a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac4cf7e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac4cf7e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac4cf7e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b943be8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b943be8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1cbb1e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1cbb1e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1cbb1e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc9600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x79ee8, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="advapi32res.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0a8cce, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0a8cce, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0a8cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2843776b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2843776b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2843776b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="amsi.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb0d81e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb0d81e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb0d81e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="APHostClient.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff269e0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff269e0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff269e0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppCapture.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fb0c58, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28fb0c58, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28fb0c58, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppContracts.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e0d281, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e0d281, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e0d281, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecbe41, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ecbe41, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ecbe41, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfa48, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x6457b480, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x645a16ea, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3d400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppLockerCSP.dll", cAlternateFileName="")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5e0beba2, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5e0e5005, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x28600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5a86ab20, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5a890de3, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x5ae00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppointmentActivation.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c5b419, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c5b419, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c5b419, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x87000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppointmentApis.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="apprepapi.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="apprepsync.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283eb2be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283eb2be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x283eb2be, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2dd60, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppxAllUserStore.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7b400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppxApplicabilityEngine.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppXDeploymentClient.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314e80ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314e80ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314e80ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd9600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppxPackaging.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AppxSip.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ff45f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56ff45f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56ff45f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd87800, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x8dd87800, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x8dd87800, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="aspnet_counters.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab41f0c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc3df, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bbcc3df, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bbcc3df, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf2ee00, ftCreationTime.dwHighDateTime=0x1cc27d2, ftLastAccessTime.dwLowDateTime=0x2c7e0ff0, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xbaf2ee00, ftLastWriteTime.dwHighDateTime=0x1cc27d2, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99a07600, ftCreationTime.dwHighDateTime=0x1ce6542, ftLastAccessTime.dwLowDateTime=0x38f13f95, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x99a07600, ftLastWriteTime.dwHighDateTime=0x1ce6542, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfc3ede, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cfc3ede, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cfc3ede, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atlthunk.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c4dfe8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c4dfe8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c4dfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3ac00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6eda0, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x59690, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62e38, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x68162fec, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x68189271, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x6813cd95, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6813cd95, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ec0cb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x68162fec, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x68162fec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba74eb4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba74eb4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba74eb4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1be00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthBroker.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2acbf689, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2acbf689, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2acbf689, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthBrokerUI.dll", cAlternateFileName="")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31665867, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x31665867, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x31665867, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthExt.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314032d3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314032d3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314032d3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30863b8c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30889de6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30863b8c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30863b8c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30863b8c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52015a87, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x52015a87, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x52015a87, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x20e200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b943be8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b943be8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2be00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3235c4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3235c4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3235c4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d11b3d9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d11b3d9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d11b3d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d16788e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d16788e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d16788e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6f00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbfc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283eb2be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283eb2be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28411511, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba027a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8e076, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe8e076, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe8e076, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa2400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AzureSettingSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28483c5f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28483c5f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x284a9e8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BackgroundMediaPolicy.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99009d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b99009d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b99009d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x29360, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0102.840] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31665867, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x31665867, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x31665867, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f6800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff269e0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff269e0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff269e0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bcastdvr.proxy.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1f1d64, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1f1d64, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1f1d64, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bcd.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e395748, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e395748, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e395748, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50348, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BCP47Langs.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba4ec65, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba4ec65, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1a390, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db893a8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1db893a8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1db893a8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x58020, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314e80ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314e80ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314e80ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4ecc5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e4ecc5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e4ecc5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BingMaps.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e512eb1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e512eb1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e512eb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xace00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BingOnlineServices.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba027a9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba027a9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba027a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2b800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283c5070, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x283c5070, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x283c5070, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28352954, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28352954, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28352954, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BitsProxy.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5ab817, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e5ab817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e5ab817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="biwinrt.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c7423f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c7423f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c7423f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abda86e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2abda86e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2abda86e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BluetoothApis.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e69062e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e69062e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e69062e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5d60, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99009d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b99009d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b99009d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe8e076, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe8e076, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe8e076, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BrowserSettingSync.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3235c4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3235c4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3235c4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0102.841] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315ccf05, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315ccf05, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315ccf05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db2940, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29db2940, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29db2940, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3233627b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3233627b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3233627b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CallButtons.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d141630, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d141630, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d141630, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CallButtons.ProxyStub.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290495be, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x290495be, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x290495be, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CallHistoryClient.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3e1be1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e3e1be1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e3e1be1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CameraCaptureUI.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2acbf689, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x60200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab41f0c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x65800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5131ee1d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5131ee1d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5131ee1d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bac1369, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bac1369, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bac1369, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcfe00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f387c01, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f387c01, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f387c01, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c6000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cdp.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b765fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29b765fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29b765fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cemapi.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba4ec65, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba4ec65, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="certca.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac99437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b6e1650, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b6e1650, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b72db05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27bc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0102.842] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28378bb7, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28378bb7, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28378bb7, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e4a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac99437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac99437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac99437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c4dfe8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62c4dfe8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62c4dfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x38e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325725bd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x325725bd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x325725bd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28de7026, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28de7026, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28de7026, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35378, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5973a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e5973a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e5973a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8d60, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cfmifs.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e5973a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e5973a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e5973a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cfmifsproxy.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x565e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Chakra.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8d000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Chakradiag.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56323bdf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x56323bdf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x56323bdf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Chakrathunk.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b765fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29b765fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29b765fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="chartv.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c81670, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c81670, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c81670, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x83e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ChatApis.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c074d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x333c074d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x333c074d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282e0245, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282e0245, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282e0245, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d8c6ed, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29d8c6ed, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29d8c6ed, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x807e0, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2feb42d5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2feb42d5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc3df, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bbcc3df, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bbcc3df, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29dd8b9a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29dd8b9a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29dd8b9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ClipboardServer.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2fcdca, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e2fcdca, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e34927f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Clipc.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f5fe91, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33f5fe91, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33f5fe91, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="clrhost.dll", cAlternateFileName="")) returned 1 [0102.843] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51213daf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51213daf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51213daf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x77600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c351c3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c351c3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c351c3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmdext.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3077ed75, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3077ed75, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3077ed75, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x76600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307328c0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x307328c0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x307328c0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cngcredui.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c351c3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c351c3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c351c3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd56cea1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xd56cea1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xd56cea1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2de80, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275e95db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x275e95db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x275e95db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1bd608, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="combase.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3168bac6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3168bac6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3168bac6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ef60, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315f315c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315f315c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315f315c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xeba00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57760, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="coml2.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fbb93d3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fbb93d3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fbb93d3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CommsTypeHelperUtil_ca.dll", cAlternateFileName="")) returned 1 [0102.844] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0ff40a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f0ff40a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f0ff40a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2300, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d18dae1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d18dae1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d18dae1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ce0, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CompPkgSup.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314c1e90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314c1e90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314c1e90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="compstui.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comrepl.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab41f0c, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab41f0c, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab6816b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13d000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comres.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aacf7fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aacf7fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aacf7fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x39600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comsnap.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1bcb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ab1bcb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ab1bcb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x144400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comsvcs.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aaf5a5b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aaf5a5b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aaf5a5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9f200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="comuid.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cc6e00, ftCreationTime.dwHighDateTime=0x1d5c5b7, ftLastAccessTime.dwLowDateTime=0x659c88b8, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x57cc6e00, ftLastWriteTime.dwHighDateTime=0x1d5c5b7, nFileSizeHigh=0x0, nFileSizeLow=0x3d120, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ConfigureExpandedStorage.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30889de6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x30889de6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x30889de6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x140200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="connect.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51403c43, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51403c43, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51403c43, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ConnectedAccountState.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316193ba, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x316193ba, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3163f611, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="console.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ContactActivation.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c81670, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29c81670, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29c81670, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xbbe00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ContactApis.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2001f0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d2001f0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d2001f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CoreMessaging.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ff0078a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ff0078a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ff0078a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CoreMmRes.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3e1be1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e3e1be1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e3e1be1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b78, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CoreUIComponents.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="Cortana.Persona.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdf5714, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fdf5714, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fdf5714, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CortanaMapiHelper.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe1b973, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2fe1b973, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2fe1b973, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CortanaMapiHelper.ProxyStub.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5136b2ce, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5136b2ce, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5139153c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CPFilters.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313dd079, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x313dd079, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x313dd079, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CredentialMigrationHandler.dll", cAlternateFileName="")) returned 1 [0102.845] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3155a7fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3155a7fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3155a7fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CredProvDataModel.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3150e345, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3150e345, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3150e345, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="credprovhost.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3155a7fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3155a7fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3155a7fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="credprovs.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9dc54e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9dc54e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9dc54e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="credssp.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="credui.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce92be3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ce92be3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ce92be3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2461b, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="crtdll.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba4ec65, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x176c30, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="crypt32.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1f1d64, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1f1d64, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1f1d64, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7b28, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptbase.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d082a6f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d082a6f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d082a6f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptdlg.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptdll.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac26d23, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac26d23, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac26d23, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptext.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba74eb4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba74eb4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba74eb4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x21600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptnet.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e55f366, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e55f366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e55f366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptngc.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bac1369, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="CryptoWinRT.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba9b10f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10e70, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptsp.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="crypttpmeksvc.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptui.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba28a07, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba28a07, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba28a07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x59200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptuiwizard.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9b62fb, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b9b62fb, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b9b62fb, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18540, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cryptxml.dll", cAlternateFileName="")) returned 1 [0102.846] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cscapi.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cscdll.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376f4af8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5b7ea368, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5b81051e, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x34600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="cscobj.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bba6180, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bba6180, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bba6180, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ctl3d32.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x36800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="C_G18030.DLL", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dc0dd0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28dc0dd0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28dc0dd0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="c_GSM7.DLL", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecbe41, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ecbe41, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ecbe41, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="C_IS2022.DLL", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e4b2a2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29e4b2a2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29e4b2a2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="C_ISCII.DLL", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e133198, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e133198, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x489c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d2d1.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3339a4f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3339a4f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3339a4f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x102e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3339a4f3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3339a4f3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3339a4f3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10core.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7d330, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10level9.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3267d62a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3267d62a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x326a388d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x217eb8, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10warp.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3334e042, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3334e042, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3334e042, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x26800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10_1.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33374298, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33374298, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33374298, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d10_1core.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x215a68, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d11.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e17f649, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e17f649, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e17f649, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="D3D12.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332db932, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332db932, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x105c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d8.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d8thk.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332db932, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332db932, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332db932, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7770, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3d9.dll", cAlternateFileName="")) returned 1 [0102.847] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a58a8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e1a58a8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e1a58a8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x386200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="D3DCompiler_47.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3dim.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd9400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3dim700.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b56d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x332b56d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x332b56d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x91600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3dramp.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c074d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x333c074d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x333c074d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="d3dxof.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e0d281, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28e0d281, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28e0d281, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dabapi.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f387c01, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f387c01, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f387c01, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DafCdp.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x314c1e90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x314c1e90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x314c1e90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DafPrintProvider.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e585f21, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e585f21, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e585f21, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DaOtpCredentialProvider.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fef838, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fef838, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fef838, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dataclen.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2b0915, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e2b0915, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e2b0915, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DataExchange.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ea5bef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28ea5bef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28ea5bef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="davclnt.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa36e9f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2aa36e9f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2aa36e9f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="davhlpr.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28de7026, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x28de7026, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x28de7026, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ca00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DavSyncProvider.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33432e59, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33432e59, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33432e59, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dbgcore.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334590af, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x334590af, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x334590af, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e3a00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dbgeng.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33432e59, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33432e59, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33432e59, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x124200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334590af, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x334590af, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x334590af, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6b200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="DbgModel.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cab2ecd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cab2ecd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cab2ecd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dbnetlib.dll", cAlternateFileName="")) returned 1 [0102.848] FindNextFileW (in: hFindFile=0xe20068, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc7cb00, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2cc7cb00, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2cc7cb00, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="dbnmpntw.dll", cAlternateFileName="")) returned 1 [0102.859] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="userenv.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x6f8e0000) returned 0x0 [0102.875] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc547e8 [0102.876] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc547d0 [0102.883] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54800 [0102.883] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe1f560 [0102.886] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="user32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x74c10000) returned 0x0 [0102.886] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54830 [0102.887] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54998 [0102.888] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54920 [0102.888] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b30 [0102.889] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc549f8 [0102.890] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b48 [0102.890] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54aa0 [0102.893] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54938 [0102.894] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54ad0 [0102.894] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a28 [0102.895] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc549b0 [0102.895] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b18 [0102.896] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54950 [0102.897] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe1f560 [0102.898] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="gdi32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x74250000) returned 0x0 [0102.898] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc549c8 [0102.899] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a58 [0102.899] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a70 [0102.900] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54968 [0102.900] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc549e0 [0102.901] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b60 [0102.901] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54ba8 [0102.902] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a10 [0102.902] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a40 [0102.903] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc548f0 [0102.903] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54980 [0102.904] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54ae8 [0102.904] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54a88 [0102.905] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b78 [0102.906] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54ab8 [0102.906] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b00 [0102.908] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54b90 [0102.908] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc548c0 [0102.909] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc548d8 [0102.909] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54908 [0102.909] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe1f560 [0102.912] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x75ca0000) returned 0x0 [0104.994] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54bc0 [0104.995] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54bf0 [0104.996] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c08 [0104.997] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c20 [0104.997] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe27380 [0105.000] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x18fc24 | out: BaseAddress=0x18fc24*=0x75950000) returned 0x0 [0105.248] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.248] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoCreateGuid", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754de9c0) returned 0x0 [0105.248] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c80 [0105.249] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c38 [0105.250] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.250] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoInitializeEx", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754788d0) returned 0x0 [0105.250] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c50 [0105.252] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.252] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoUninitialize", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754792a0) returned 0x0 [0105.252] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54bd8 [0105.253] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54c68 [0105.254] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.255] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoInitializeSecurity", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754e3870) returned 0x0 [0105.255] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54fc8 [0105.256] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.256] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoCreateInstance", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754a0060) returned 0x0 [0105.256] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc54fe0 [0105.257] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.257] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoCreateInstanceEx", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754e5bc0) returned 0x0 [0105.257] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc55028 [0105.258] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x18fe50 | out: BaseAddress=0x18fe50*=0x75420000) returned 0x0 [0105.258] LdrGetProcedureAddress (in: BaseAddress=0x75420000, Name="CoSetProxyBlanket", Ordinal=0x0, ProcedureAddress=0x18fe50 | out: ProcedureAddress=0x18fe50*=0x754760a0) returned 0x0 [0105.258] RtlAllocateHeap (HeapHandle=0xc50000, Flags=0x0, Size=0x10) returned 0xc55010 [0105.258] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\*.dll" (normalized: "c:\\windows\\syswow64\\*.dll"), lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3246754b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3246754b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x324d9c57, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f600, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AboveLockAppHost.dll", cAlternateFileName="")) returned 0xe27480 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb59ccf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb59ccf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb59ccf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x39d400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315ccf05, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x315ccf05, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x315ccf05, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AccountsControlInternal.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9ea9ee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2a9ea9ee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2a9ea9ee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x58200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AccountsRt.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0cef24, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0cef24, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0cef24, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x282b9ff6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x282b9ff6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x282b9ff6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3163f611, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3163f611, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3163f611, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x524400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29be8d06, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29be8d06, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29be8d06, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fa337f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51fa337f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51fa337f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x85800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e36f4d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2e36f4d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2e36f4d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActivationClient.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969e42, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b969e42, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b969e42, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37000, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e714f9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29e714f9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29e97753, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1a0c00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="ActiveSyncProvider.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0f517f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2d0f517f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2d0f517f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x217800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29bc2aaf, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x29bc2aaf, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x29bc2aaf, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AddressParser.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58412321, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5d2e303c, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5d309326, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x6ec00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac731d8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ac731d8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ac731d8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b7b613, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5a274c2f, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x5a274c2f, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adrclient.dll", cAlternateFileName="")) returned 1 [0105.259] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba9b10f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2ba9b10f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2ba9b10f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x36e00, dwReserved0=0x7728562e, dwReserved1=0x0, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0105.260] FindNextFileW (in: hFindFile=0xe27480, lpFindFileData=0x18fcbc | out: lpFindFileData=0x18fcbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b91d98a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2b91d98a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2b943be8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0